k7-total-security-unlock-patch-detection

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Yes — the set contains a GitHub repo and GitHub Pages explicitly advertising an "Unlock Patch" / crack for commercial antivirus (K7) and links to an external download badge, which are classic high‑risk indicators of malware distribution and should be treated as suspicious despite nearby official vendor links.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow is centered on analyzing a specific repository’s README/metadata (e.g., “README Content Analysis” and “Repository Pattern Analysis”), which would ingest outsider-authored free text from that GitHub repo (README/description/topics) into the agent’s LLM context for analysis.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill includes explicit sudo commands that modify system state (e.g., bringing network interfaces down, running tcpdump) and instructs actions that require elevated privileges, so it pushes the agent to perform privileged, state-changing operations on the host.