data-scientist

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Two of the URLs are direct installer scripts (install.sh and install.ps1) hosted on astral.sh — direct execution of remote shell/PowerShell installers is a high-risk pattern unless you fully trust and verify the publisher and release artifacts.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow invokes scripts/quick-query.py which ingests outsider-provided CLI free text (sql / --filter) and passes it into DuckDB via duckdb.sql(query) or into Polars via pl.sql_expr(expr), without requiring first selecting a specific trusted item.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The provided setup scripts and documentation fetch and execute remote installers from https://astral.sh/uv/install.sh and https://astral.sh/uv/install.ps1 during environment setup (e.g., curl ... | sh and irm ... | iex), which downloads and runs remote code required to install the runtime tool 'uv'.