axiom-resolve-spm

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Most URLs point to untrusted/placeholder GitHub repos (single-letter, example, or fork accounts) rather than well-known vendor repositories, which makes them higher risk for distributing malicious or tampered binaries; only the official Alamofire repo appears benign.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill explicitly recommends bypassing the sandbox security mechanism (using --disable-sandbox / swift build --disable-sandbox), which is an instruction to weaken local security controls; other commands remove caches/build artifacts but do not require elevated privileges.