fabric

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The links are mostly GitHub-hosted documentation and a localhost endpoint, but the raw GitHub URL to the installer script (install.sh) is a direct shell installer that could be piped to bash and therefore represents a suspicious download vector.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes an install instruction that runs remote code via curl -fsSL https://raw.githubusercontent.com/danielmiessler/fabric/main/scripts/installer/install.sh | bash, which would fetch and execute external code if executed.