giraffe-guard

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a third‑party GitHub path from an unknown/untrusted user hosting a skill package (not an official vendor or well-established repo), so it represents a supply‑chain risk even though it’s not a direct executable link.