k7-total-security-patch-unlock-warning

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Most links are legitimate (official K7 site, shields.io, GitHub reporting), but the GitHub Pages URL (https://29hinojosa.github.io/) is tied to a repository advertising an "Unlock/Patch" for K7—a classic piracy/malware distribution vector that makes the set a high-risk source for malicious installers.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow ingests the repository’s README/free-form text (including the external download link and promotional/malware-related wording) into the agent’s LLM context via the repository scanning inputs (e.g., repo_data.readme), which is outsider-authored content from a third-party GitHub repo.