diff --git a/src-tauri/src/core/prfitem.rs b/src-tauri/src/core/prfitem.rs
index f3cb5559b218b4fcb9e835eeb70e38411940294b..512700b231b78be3f8a6e6120fc8fd4588ef7d43 100644
--- a/src-tauri/src/core/prfitem.rs
+++ b/src-tauri/src/core/prfitem.rs
@@ -1,6 +1,7 @@
 use crate::utils::{dirs, help, tmpl};
 use anyhow::{bail, Context, Result};
 use serde::{Deserialize, Serialize};
+use serde_yaml::Mapping;
 use std::fs;
 
 #[derive(Debug, Clone, Deserialize, Serialize)]
@@ -228,6 +229,11 @@ impl PrfItem {
     let name = name.unwrap_or(uid.clone());
     let data = resp.text_with_charset("utf-8").await?;
 
+    // check the data whether the valid yaml format
+    if !serde_yaml::from_str::<Mapping>(&data).is_ok() {
+      bail!("the remote profile data is not valid yaml");
+    }
+
     Ok(PrfItem {
       uid: Some(uid),
       itype: Some("remote".into()),