lazyweb-paywall-cta

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Suspicious — the domain hosts a direct install.sh (a raw shell script intended to be downloaded/executed), which combined with the prompt's curl|bash instruction is a high-risk distribution vector; the /mcp and /report endpoints are less directly dangerous but share the same untrusted domain, so the overall source should be treated as untrusted.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow calls lazyweb_paywall_cta_research (and possibly lazyweb_search / lazyweb_search_ab_tests) to retrieve evidence from external/public sources, which can include outsider-authored free text (e.g., scraped web pages or community/third-party A/B writeups) that the agent then embeds into work/report-data.json and passes to lazyweb_render_report as LLM-readable content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs running remote install code at runtime via "curl -fsSL https://www.lazyweb.com/install.sh | bash" (and depends on the hosted Lazyweb MCP at https://www.lazyweb.com/mcp), which fetches and executes remote code and is required for the skill to function.