modao-capture

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (medium risk: 0.30). The project's package-lock.json file resolves dependencies from a non-standard third-party npm registry (npm.abczs.cn), which is a supply chain indicator of suspicious third-party downloads.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow uses Puppeteer to fetch and parse external Modao prototype pages and annotations specified by URL, which are rendered by the agent and read into context, exposing the agent to untrusted web content (low risk since URLs are actively fetched/searched rather than passively monitored like an email inbox).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The dependency lockfile specifies an unofficial registry URL (npm.abczs.cn) for fetching packages during npm install, creating a weak operational dependency.