nb-cli

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These are direct installer scripts hosted as GitHub release assets for an unfamiliar/org-specific repository — GitHub is a legitimate host but direct .sh/.ps1 installers (commonly piped to shell/PowerShell) can execute arbitrary code and are risky unless you verify the repo, the release contents, and the publisher's authenticity first.