arcads-video-agent

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub repository is potentially suspicious because the skill instructs users to git-clone it and run an included setup script (./scripts/setup.sh), which could execute arbitrary code from an unvetted/unknown source.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL instructs cloning and running a remote repository (git clone https://github.com/krusemediallc/arcads-claude-code.git followed by ./scripts/setup.sh), which fetches and executes remote code and supplies prompt/template files that the agent later loads and relies on.