alt-distribution

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs include direct download links to executable artifacts on GitHub Releases (an APK and a tar.gz containing binaries) which are high-risk distribution vectors when hosted from unverified/placeholder repositories and can be used to distribute malware.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly instructs running privileged system commands (e.g., "sudo apt install flatpak flatpak-builder") which modify the host system state and require elevated privileges.