auditing-a-repository

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The URL https://deps.example/setup.sh is a direct installer script (example of "wget … | sh") which is an unpinned, unchecked remote shell script — a high-risk supply-chain/malware vector if executed.