xurl

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The raw GitHub URL is a direct shell script intended to be fetched and piped to bash (curl | bash), which is a common malware distribution vector and should be treated as high-risk unless you fully trust the repository and maintainers.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required agent workflow, the runtime path includes xurl search "..." and other reading shortcuts (e.g., xurl timeline -n ..., xurl mentions -n ..., xurl read ...), which ingest outsider-authored post/user text returned by X into the LLM session without selecting a specific trusted item first.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The install instructions include a direct curl-and-pipe command that fetches and executes remote code (curl -fsSL https://raw.githubusercontent.com/xdevplatform/xurl/main/install.sh | bash) and a go install reference (go install github.com/xdevplatform/xurl@latest) which likewise pulls and builds remote code, so these are runtime external dependencies that execute code.