lazyweb-quick-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Direct curl | bash of a shell script hosted on an untrusted/unknown domain is high-risk (direct executable script from a non-official site can easily deliver malware).

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The README directs users to execute a remote install script via "curl ... | bash", which enables arbitrary remote code execution and is a high-risk supply-chain/backdoor vector.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs runtime execution of remote code via "curl -fsSL https://www.lazyweb.com/install.sh | bash", which fetches and immediately executes a script from https://www.lazyweb.com/install.sh.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs running an unverified remote install script via curl ... | bash, which directs the agent to execute arbitrary code that can modify the machine state and potentially require/obtain elevated privileges.