chronosforge-temporal-email-cli

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The presence of a direct download link to a pre-built binary hosted in a personal GitHub repository (randyfajar) and GitHub Pages — an unvetted third‑party executable distribution — makes this a potentially risky source for malware even though other links are local/placeholders.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow ingests email message body/subject/sender text from the monitored disposable inbox (i.e., third-party-authored verification emails) via chronosforge inbox watch ... --extract / chronosforge extract ..., and that message content is then parsed and fed into the agent’s LLM context for code/link extraction—an outsider source (email sender) providing free-form text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes installation/CI instructions that fetch and execute remote code (e.g., git clone https://github.com/randyfajar/inbox-watcher-cli.git and wget https://github.com/randyfajar/inbox-watcher-cli/releases/latest/download/chronosforge-linux), which are runtime external dependencies that result in executing downloaded code.