test-case-generator

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.75). claude.ai is an official vendor site (low risk), but the GitHub repository is a third‑party, user‑hosted skill that asks users to package/upload a ZIP and enable code execution — unverified GitHub-hosted code from an individual account can run arbitrary code and is therefore potentially suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在该 Skill 的运行流程中，用户通过对话直接提供的“需求文档”（文字/图片/PDF/DOCX内容）会被模型读取并用于生成测试用例与 Excel，而这些文档内容属于外部作者可控的自由文本输入。