git-changelog-gen

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.85). The URL points to an untrusted GitHub repo/user (spooky-may / rogue-agent1) that distributes a skill via an npx install of an unfamiliar package (clawhub), which is a common vector for executing unvetted code and therefore suspicious.