ai-upskilling-training-diagnosis

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Potentially suspicious: while no direct .exe/.msi links are present, the GitHub repo is from an unknown account (low-reputation source) and the v.douyin.com short/redirect URL obscures the real destination—both are common vectors to distribute malicious content, so verify the repo and follow redirects cautiously before downloading or running anything.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). 该技能在运行时会接收用户提供的 orgLearningLink（公开URL）并在技能内部读取其页面/内容作为可读文本进入LLM上下文，属于“运行时抓取的公共网页内容/任意URL”这一类外部自由文本来源。