booking-skill

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most links are to official sources (registry.npmjs.org, Apple/Google CDNs, github, googletagmanager) and are low risk, but the presence of direct APK downloads hosted on non-official domains (e.g. https://img.beautsgo.com/3.6.apk), custom JS files on unknown hosts (umini.shujupie.com/eg.js) and many resources served from third‑party/personal hosts (beautsgoimg.59w.net, beautsgo.com/img domains) are high‑risk indicators for distributing executables/malware, so the overall set should be treated as suspicious.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)