autoresearch

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Most URLs are reputable docs/GitHub links, but https://astral.sh/uv/install.sh is a direct installer shell script (used with curl | sh) which is a high-risk distribution pattern that could deliver malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The setup path includes a runtime curl | sh call to https://astral.sh/uv/install.sh (executes remote installer) and a git clone of https://github.com/karpathy/autoresearch which is then run via uv (fetches external code that will be executed), so these URLs are runtime dependencies that execute remote code.