ai-seo-aeo-blog-writer

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs point to a third‑party skills marketplace (ai-skills.ai, skillsmp.com) and GitHub content from unfamiliar usernames (sickn33 / allinherog-star): they do not directly link to .exe/.msi or passworded archives but represent third‑party/supply‑chain sources from unknown accounts and should be treated as potentially suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). 该技能在运行时会把用户提供的 materialText/materialFile/materialUrl 作为“contextComposer”输入到 LLM；其中若 materialUrl 指向公开网页或 materialText/文件包含他人撰写的内容，则会把外部自由文本读入上下文（间接提示注入风险）。