ai-marketing-videos

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.85). These links are suspicious because the skill instructs users to curl | sh an installer from an unvetted domain and download binaries/media from self-hosted subdomains (cli., dist., cloud.) and an ambiguous external audio URL, which are common vectors for distributing malware even if a checksum file is published.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Quick Start explicitly runs a remote installer via "curl -fsSL https://cli.inference.sh | sh" (which downloads binaries from dist.inference.sh), so https://cli.inference.sh is a runtime dependency that fetches and executes remote code.