se-dev-game-code

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Most URLs are official PyPI packages and known resources, but the astral.sh install scripts (install.sh / install.ps1) and the direct BusyBox Windows executable hosted on frippery.org are direct script/executable downloads from third-party hosts and therefore represent higher-risk download sources.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, outsider-provided free text is only accepted as the user’s search pattern or shell command arguments (e.g., uv run search_game_code.py ... <patterns...> or se-dev-game-code bash/grep/cat), and the skill ingests it directly into its code-search/grep logic rather than selecting a specific pre-existing item first.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). common-posix.sh calls curl/wget to fetch and pipe https://astral.sh/uv/install.sh to sh during preparation (installing the required "uv" tool), which executes remote code at runtime and is relied on by the skill, so this URL is flagged.