audiobook-creator

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The GitHub releases URL is a personal/third‑party release location used to download unverified binary model files at runtime (high risk), while the ffmpeg.org link is an official documentation page and not suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes: the required Step 1 runs scripts/extract_text.py on a user-supplied file path and prints the extracted document text to stdout, which is then ingested by the calling model to build script.json (outsider-authored file body text → LLM context).