frontend

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Most links are to official docs, CDNs, and well-known repos, but the list includes a direct download of a shell script (https://astral.sh/uv/install.sh), which is high-risk because executing remote install.sh scripts from an untrusted domain can install malware or run arbitrary commands.