pkgmgr-homebrew-formula-dev

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Several URLs point to untrusted direct binary downloads on example.com/downloads.example.com and a set of GitHub repositories named "bad"/"bad-sha", which are suspicious indicators (direct non-vendor binaries and repos with obvious malicious names) and could be used to distribute malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In justfile the runtime workflow reads and ingests attacker-supplied JSON via template-formula json, then directly parses it (JSON.parse(parseInput(\{{json}}`))) and renders it through Mustache templates (Mustache.render(main, jsObject, partials)`), so arbitrary outsider text in the JSON becomes LLM-readable free text at runtime.