webtoon-harness

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs direct you to third‑party GitHub repositories that the skill instructs you to fetch/install (via npx and a bash installer), which is potentially risky because running code from unverified or small GitHub accounts can distribute malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). [references/workflow.md → Phase 2 (Research): the research team gathers live web data via the scrapling skill, which ingests outsider-authored text from external web pages that the attacker can influence]

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The installer and install commands fetch and scaffold remote agent/skill definitions that will be executed as runtime agent prompts — e.g., the installer clones and copies https://github.com/revfactory/webtoon-harness into .claude (scripts/install.sh git clone) and the npx install pulls https://github.com/akillness/jeo-skills, so these URLs provide required external content that directly controls agent instructions at runtime.