mcp-harness-repo-maintainer

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The bundle includes a direct curl|bash to a raw.githubusercontent.com install.sh hosted under an individual GitHub account and a linked GitHub repo page from that same account—directly executing raw scripts from an individual/unknown repo is a high-risk distribution vector.