multi-agent-orchestration

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs include insecure wildcard patterns (http://* and https://*) and a direct link to an install script on an untrusted/reserved domain (https://example.invalid/install.sh), both of which are high-risk indicators for delivering or obscuring malicious installers/scripts.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill explicitly describes scripts that auto-bypass interactive "trust" and "permission" dialogs by sending keystrokes and running background watchers (automating acceptance of permission prompts), which effectively instructs automation to bypass host-level confirmation flows; it also references package install commands (including sudo apt-get) though installs are said to require explicit approval.