ilya-sutskever-perspective

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These are primarily personal/unvetted GitHub repositories (and an explicit git clone/npx install point in the README) that the skill instructs users to fetch/run — installing or running code from an individual GitHub account (alchaincyf) without verification is a common vector for malware or supply‑chain compromise.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). 在该 Skill 的运行时工作流中，Step 2 明确要求对用户问题进行 WebSearch/WebFetch 以获取最新论文与事件信息；因此运行时会读取第三方网页等“任意外部文本”，存在被注入的间接风险。