bot-panel-review-loop

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The URL is a GitHub repository (catena-labs/dev-skills) hosting shell scripts and automation that a user would be expected to run; while GitHub is a common legitimate source, executing unreviewed .sh scripts from any repo (or installing skills that run commands) can distribute malware if the repo or account is malicious or compromised, so treat it as potentially risky unless you verify the maintainers and review the code.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text can enter the LLM context via the per-PR agent’s panel-review gather-only step, which reads the PR diff/content from GitHub (outsider-authored code/PR text) and then synthesizes it into the model context.