agentteams-hiclaw-multi-agent-orchestration

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs are suspicious because they include direct, remotely-hosted install scripts (https://higress.ai/hiclaw/install.sh and .ps1) and a third‑party Helm repo (higress.io) from domains not verified here—directly curling/iex-ing remote .sh/.ps1 is a high‑risk vector (the other listed localhost/cluster.local/internal endpoints are not public download sources but indicate post-install internal access which an untrusted installer could target).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The installation commands fetch and immediately execute remote install scripts (bash <(curl -sSL https://higress.ai/hiclaw/install.sh) and iex (New-Object Net.WebClient)...'https://higress.ai/hiclaw/install.ps1')), and the Helm repo URL (https://higress.io/helm-charts) is used to pull chart content during install — all of which fetch remote code that will be executed as part of setup.