install-deps

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The link is to a direct installer shell script on astral.sh (likely the official "uv" installer), so while the domain appears legitimate and uses HTTPS, executing a remote .sh (curl | sh) is inherently risky — audit the script and confirm the vendor before running.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runtime includes a command that would fetch and execute a remote install script via "curl -LsSf https://astral.sh/uv/install.sh | sh", which runs remote code to install the preferred "uv" tool that the plugin treats as a hard prerequisite for its venv workflow.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The prompt instructs installing system-wide packages (e.g., "sudo apt install ...") and running external install scripts (curl | sh), which modify the host system and require elevated privileges, so it pushes the agent to change the machine state.