sentiment-analyst

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The GitHub repo link appears to point to an official Bitget repository (lower risk), but the datahub.noxiaohao.com/mcp endpoint is an untrusted third‑party/personal server referenced in the skill (high risk for distributing executables or malware).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow includes derivatives_sentiment(action="reddit_trending"), which ingests community discussion text from Reddit at execution time, so outsider-authored free-form posts/comments can be read by the LLM.