scrapling

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The list includes a third‑party GitHub repo (https://github.com/akillness/jeo-skills) that the installer uses with npx (which downloads and can execute code), making it a higher‑risk install source; the other URLs are documentation, known upstream GitHub repos, or placeholders and do not point to direct executables or obscured redirects.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes—at runtime the required workflow can fetch outsider-authored public web content (e.g., user-supplied URLs) via the Fetcher/DynamicFetcher/StealthyFetcher paths, which ingest the fetched page HTML/text into the agent’s context through extraction outputs (e.g., .md/.txt or returned tool results).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The install step uses npx to fetch and install the remote jeo-skills package (https://github.com/akillness/jeo-skills), which downloads and executes third-party code during setup and is presented as the required plugin-registration step for the skill.