webcmd-sitemap-author

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is a generic GitHub repo URL pattern that can point to any user/repo (including new, low-reputation, or typo-squatting accounts and release assets/executables), so it cannot be trusted as a safe download source without inspecting the specific owner/repository and release metadata.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow explicitly loads and uses “browser state” and retained browse traces from ~/.webcmd/sites/<site>/traces/ / webcmd browser <session> state, which are runtime-derived page content summaries that can include outsider-authored text (e.g., from the visited website) and thus can be fed into the agent’s LLM context.