lazyweb-growth-score

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Direct link to an install.sh on an unverified domain and instructions to curl it and pipe to bash are high risk because they deliver and execute arbitrary code from an untrusted source.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs running a remote installer that downloads and executes code at runtime via curl -fsSL https://www.lazyweb.com/install.sh | bash, which is a high-risk external runtime dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the agent to run a remote install command (curl ... | bash), which executes arbitrary code and changes the machine's state (potentially requiring elevated privileges), so it pushes the agent to modify the host system.