web-scraper

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The raw GitHub-hosted proxy list is an untrusted, mutable resource that the skill downloads (allowing hostile proxy routing), and the malformed "http://{p" entry is invalid/suspicious — together these make the set contain potentially dangerous download/operation sources.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The skill contains explicit guidance and code to defeat anti-bot protections (CAPTCHA/WAF/WebDriver/robots.txt), ingest untrusted public proxies, and intercept & persist application traffic (printing headers/bodies and writing raw responses), which together present clear high-risk abuse capabilities for deliberate data theft or unauthorized access.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该技能在 mitmproxy 的拦截回调中读取并处理由外部应用网络请求返回的自由文本（HTTP 请求/响应头与 Body），并直接打印和落盘（潜在被流量携带的注入文本影响流程）。