lazyweb-search-flows

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs the agent to open a private URL and return the private url, which would require the LLM to output a potentially sensitive token-bearing URL verbatim.

---

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Instructions to curl and pipe https://www.lazyweb.com/install.sh to bash are high-risk: it's a direct shell download/execute from a non-official domain and could deliver malware.

---

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The file instructs piping a remote install script into bash (curl ... | bash), a high-risk supply-chain/remote-code-execution pattern, and also directs returning a "private" URL which could expose sensitive session tokens if mishandled.

---

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md describes an external “Lazyweb” search flow that calls lazyweb_search_flows and then finalizes selected references, which implies the runtime ingests third-party web content provided by outsider authors through search results.

---

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs the operator to run curl -fsSL https://www.lazyweb.com/install.sh | bash, which fetches and immediately executes remote code at runtime (https://www.lazyweb.com/install.sh), so it is a high-risk runtime external dependency.

---

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs executing a remote install script via curl -fsSL https://www.lazyweb.com/install.sh | bash, which runs arbitrary code on the host and can modify system state or escalate privileges.