CtrlK
BlogDocsLog inGet started
Tessl Logo

team

N coordinated agents on shared task list using Claude Code implicit agent teams

50

Quality

Does it follow best practices?

Impact

No eval scenarios have been run

SecuritybySnyk

Critical

Do not install without reviewing

SKILL.md
Quality
Evals
Security

Security

1 critical severity finding. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.

Critical

E005: Suspicious download URL detected in skill instructions

What this means

Detected a suspicious URL in the skill instructions that could lead the agent to download and execute malicious scripts or binaries. This includes links to executables from untrusted sources, typosquatting of official packages, URL shorteners that obscure the destination, and personal file hosting services.

Why it was flagged

Suspicious download URL detected (high risk: 0.70). antigravity.google is a Google-controlled domain and appears low-risk, but github.com/psmux/psmux is a third‑party GitHub repository (potentially small/unverified) which could host binaries or releases from an unknown author and therefore represents a moderate-to-high risk until you verify the source, build/review the code, and avoid running untrusted executables.

Report incorrect finding
Repository
Yeachan-Heo/oh-my-claudecode
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.