cali-coding-starhtml

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This set includes an instruction to curl a raw Python script and install it as an executable from a third‑party GitHub user (renatocaliari), which is a supply‑chain/execute‑me risk and should be treated as suspicious.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs installing a downloaded script directly into /usr/local/bin (and later describes updating it in-place), which modifies system-level files that normally require elevated privileges and can change the machine's state.