bb-plugins

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The first two URLs reference the official getbb marketplace and its GitHub repo (low risk), but the third is a direct git install from a third‑party GitHub account (https://github.com/acme/...), which is potentially suspicious because bb plugins run with full trust and installing code from unknown repositories can deliver malware.