simplified-cli

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitLab project-specific PyPI index (https://gitlab.com/api/v4/projects/70495826/packages/pypi/simple) is a non-official package index and therefore a supply-chain risk for distributing malicious Python packages; the other URLs are either official (pypi.org, api.simplified.com) or media/placeholders and not direct executable download sources.