markdown-formatter

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The registry URL https://clawhub.ai is an unknown third‑party package registry used by the skill to distribute/install the package (potentially including binaries), which is a suspicious download source; the GitHub link is standard and the "https://url" entry is a non‑specific placeholder.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime paths main(action, params) → formatMarkdown(params) and lintMarkdown(params) directly process the caller-supplied params.markdown free text, meaning outsiders can inject content through the tool’s required input field (e.g., via a queue/tool call payload) without any selection step.