keel

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL is a direct GitHub "releases/latest/download" asset (https://github.com/modelcontextprotocol/registry/releases/latest/download/mcp-publisher_$) which is a direct-download of a release artifact from a small/unknown project and therefore matches high-risk indicators for distributing executables or installers.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Keel’s required runtime workflow ingests outsider-authored free text from the target repository by mechanically locating verification “surfaces” and carrying the literal raw snippets into LLM classification for each pending node.