ask-samin-claude-club

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The Skool links are benign, but the ask-samin-ochre.vercel.app host is a personal Vercel site that provides a direct skill zip and a custom MCP connector—downloading/installing unverified archives or adding an untrusted connector can distribute malware or enable data exfiltration, so those URLs are suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow calls the Ask Samin MCP search/fetch tools at runtime, and the LLM then ingests the returned lesson text/fields (e.g., snippet/body, location, timestampLabel, and Skool URLs) into its context; since this content is sourced from an external MCP/Skool curriculum rather than authored by the operating user, it is outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires an external MCP at runtime (https://ask-samin-ochre.vercel.app/mcp) which the agent calls to retrieve lesson content that directly controls reply content/formatting, so this external URL is a runtime dependency that can control prompts.