mcp-code-execution-mode

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These point to an unknown GitHub repository (and referenced GHCR image) plus a personal domain — legitimate hosting services but an unvetted maintainer distributing code/images you’d run locally, so they present a moderate-to-high risk unless you verify the source and inspect the code/image first.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's default runtime configuration uses the external container image ghcr.io/elusznik/mcp-code-execution-mode:latest (via MCP_BRIDGE_IMAGE / podman/docker), which is fetched and executed at runtime and thus is a required external artifact that runs remote code.