perfectpixel

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs include direct GitHub release download links and a .git clone URL used by the install script to fetch prebuilt binaries or source—directly distributing executables from a (potentially untrusted) GitHub repo is a common malware vector.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's install.sh downloads and/or git-clones the remote repository https://github.com/gykim80/perfectpixel-studio (and release assets at https://github.com/gykim80/perfectpixel-studio/releases/...) at runtime to obtain and build/execute the ppgen binary, which is remote code executed as a required dependency.