vn-skill

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs include a direct GitHub release ZIP linking to a native CLI binary and the personal GitHub repo that publishes it (cawcut/skill-vn) — distributing executables from a third‑party repo is higher risk unless the author and release are verified.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill auto-downloads and installs a CLI at runtime via curl which fetches and unzips a remote binary that is then executed (curl -L "https://github.com/cawcut/skill-vn/releases/download/0.1.0/vnapp-cli-darwin-universal-v0.1.0.5.zip"), so this external URL is a runtime dependency that executes remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill auto-installs a CLI into the user home and explicitly runs xattr -d com.apple.quarantine on the downloaded binary (a Gatekeeper/quarantine bypass), which instructs the agent to modify the host system and bypass a macOS security mechanism.