lazyweb-lite-design-research

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). One high-risk item is present: https://www.lazyweb.com/install.sh is a direct shell-install script (downloading/running .sh from the network is a common malware vector) while the other URLs (report page, /mcp, and example.com) are ordinary web pages and not direct executables; treat the set as potentially suspicious unless lazyweb.com is a verified, trusted vendor and you inspect/verify the script (e.g., view its contents, check signatures, repository, and TLS cert) before running.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill ingests outsider-authored free text from Lazyweb search results—specifically each result’s visionDescription (and possibly pageUrl/captions) returned at runtime by lazyweb_search, which is then written into report-data.json and thus into the hosted report’s LLM-rendered context.