lazyweb-ab-test-research

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The presence of a direct .sh installer (https://www.lazyweb.com/install.sh) and an explicit curl | bash installation instruction is a high‑risk pattern for malware distribution, while the other URLs (an image and a hosted report page) are non‑executable and lower risk but do not offset the danger of running a remote shell script.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime path calls lazyweb_search_ab_tests (public gateway) which fetches and returns outsider-authored free-text/screenshot-derived experiment evidence from the public web, and that returned prose/fields are then embedded into the agent’s report-data.json/LLM context for rendering.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires Lazyweb MCP and explicitly instructs running a remote install command that fetches and executes code—curl -fsSL https://www.lazyweb.com/install.sh | bash—so this URL would deliver and run remote code as the recommended installation path for a required dependency.