codexpro-chatgpt-local-agent

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs are mostly GitHub/GitHub Pages, an npm package, and legitimate tunnel/dashboard links (ngrok, Cloudflare, ara.so), but they point to a third‑party, relatively unvetted author (rebel0789) and include instructions to install a global CLI, run a local server and public tunnels—actions that can expose/execute code or credentials—so the source should be treated as potentially suspicious until verified.