package-security

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These links point to an unfamiliar GitHub user plus raw install scripts (raw.githubusercontent.com) and a releases page—install scripts piped to shell/PowerShell and prebuilt binaries from an untrusted/unknown account are high-risk malware distribution vectors.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). INFYNON’s runtime workflow for infynon pkg <ecosystem> install .../infynon pkg scan queries OSV.dev for CVEs and ingests the returned vulnerability text (public web content) into the agent’s LLM context for “LLM analysis” risk assessment.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's install instructions explicitly instruct executing remote scripts (curl -fsSL https://raw.githubusercontent.com/d4rkNinja/infynon-cli/main/scripts/install.sh | bash and irm https://raw.githubusercontent.com/d4rkNinja/infynon-cli/main/scripts/install.ps1 | iex) and fetching code via git (cargo install --git https://github.com/d4rkNinja/infynon-cli), which fetch and execute remote code during setup and are required to install the CLI.