render-deploy

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The list includes a direct link to a raw shell installer script (curl https://raw.githubusercontent.com/.../install.sh | sh) which is a high-risk pattern because piping an unattended remote .sh into a shell can execute arbitrary code and is commonly abused to distribute malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The “Deploy to Render” skill’s runtime path uses MCP/CLI calls (e.g., list_services(), get_service(), list_logs()) to read Render account data, which can include outsider-authored free text in logs/config but is not described as ingesting arbitrary queued/user-submitted text without first selecting a specific service/resource.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly suggests running a remote install command that fetches and executes code at runtime via https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh (curl ... | sh), which downloads and runs remote script content.