enterprise-user-management-ai-analytics

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub repository URL points to a personal/unknown account (not an established vendor) and could be used to distribute unvetted source or binaries, which is a common vector for malware distribution; the other URLs are local dev endpoints or a likely vendor site and are not suspicious.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL instructs users to "git clone https://github.com/Nareshkumar2583/Enterprise-User-Management-System-with-AI-Analytics.git" and then run commands (npm start, uvicorn) that execute the fetched repository code, so remote code is retrieved and executed as part of setup.