lazyweb-explain-flow

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The skill explicitly tells users to run a remote shell script via "curl ... | bash" (https://www.lazyweb.com/install.sh) from an untrusted/unknown domain, which is a high-risk malware distribution pattern.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs at runtime to run "curl -fsSL https://www.lazyweb.com/install.sh | bash", which fetches and executes remote code from https://www.lazyweb.com/install.sh and is required if the MCP tools are missing.