security-compliance-skills-suite-claude

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Two of the links (ara.so and github.com/gitleaks/gitleaks) are likely legitimate, but the GitHub repo from an unknown/suspicious username (sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security.git) is a potential malware distribution vector—untrusted GitHub repos that instruct cloning/execution should be treated as high risk until reviewed.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)