Summary
snyk-agent-scan-compliance v1.1.0 was classified as CRITICAL RISK with a risk score of 68. Sigil detected 6 findings across 7 files, covering phases including install hooks. Review the findings below before installing this package.
Package description: Compliance expert for snyk-agent-scan — the agent skill file scanner — NOT for other Snyk CLI tools (snyk test, snyk code SAST, snyk iac, snyk container). Fixes alerts through content restructuring...
v1.1.0
3 September 2026, 05:16 UTC
by Sigil Bot
Risk Score
68
Findings
6
Files Scanned
7
Provenance
Findings by Phase
Phase Ordering
Phases are ordered by criticality, with the most dangerous at the top. Click any phase header to expand or collapse its findings. Critical phases are expanded by default.
install-makefile-curl
LOWMakefile/script pipes remote content to shell
SKILL.md:80
- Pin GitHub Actions to the correct current major version (`@v4`, not `@v6`).
- Never use pipe-to-shell patterns (`curl ... | sh`) in skill bodies.
Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
evals/evals.json:65
"id": 5,
"prompt": "I want to document in a SKILL.md that users can install my tool with: `curl https://example.com/install.sh | sh`. How do I write this in the skill body?",
"trap": "Without the skill, the model says 'put it in a code block' — which does NOT fix pipe-to-shell patterns. Code blocks reduce W011 risk for regular commands, but pipe-to-shell is never acceptable in skill bodies regardless of formatting. The model conflates the two cases.",Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
evals/evals.json:70
"assertions": [
{ "id": "5.1", "description": "output does NOT recommend putting `curl ... | sh` in a code block as a sufficient fix" },
{ "id": "5.2", "description": "output states that pipe-to-shell must be removed entirely from skill bodies" },Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
LOWMakefile/script pipes remote content to shell
references/w012-patterns.md:18
| `go install pkg@latest` anywhere in body | Use exact version: `go install pkg@v1.2.3` — or move to frontmatter `install` |
| `curl https://example.com/install.sh \| sh` | Remove entirely; document the package manager install path instead |
| `wget -qO- https://example.com/install \| bash` | Remove entirely; use a package manager or frontmatter `install` block |Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
LOWMakefile/script pipes remote content to shell
references/w012-patterns.md:19
| `curl https://example.com/install.sh \| sh` | Remove entirely; document the package manager install path instead |
| `wget -qO- https://example.com/install \| bash` | Remove entirely; use a package manager or frontmatter `install` block |
| `npx package@latest` in prose | Pin: `npx package@1.2.3` — or move to frontmatter `install` |Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
LOWMakefile/script pipes remote content to shell
references/w012-patterns.md:37
`curl | sh`, `wget | bash`, `irm | iex` (PowerShell) are always flagged — they execute arbitrary remote code.
Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
Badge
Markdown
[](https://sigilsec.ai/scans/B9BA1033-A9D6-4F4C-929D-78F36CCFC813)HTML
<a href="https://sigilsec.ai/scans/B9BA1033-A9D6-4F4C-929D-78F36CCFC813"><img src="https://sigilsec.ai/badge/clawhub/snyk-agent-scan-compliance" alt="Sigil Scan"></a>Run This Scan Yourself
Scan your own packages
Run Sigil locally to audit any package before it touches your codebase.
Sigil Pro
Cloud scanning, AI investigation, web dashboard, and CI/CD integration. 14-day free trial.
Start free trial →Get threat intelligence and product updates
Security research, new threat signatures, and product updates. No spam.
Other clawhub scans
Believe this result is incorrect? Request a review or see our Terms of Service and Methodology.