issue-prioritizer

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The URL points to a low-profile GitHub user/repo (spooky-may) hosting a third‑party skill that instructs users to run an npx install (which can execute arbitrary package scripts), and the meta shows a mismatched/unknown owner — indicators of a potentially untrusted distribution source.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill is “issue-prioritizer” for GitHub issues, and at runtime it will typically ingest the body text of GitHub issues (outsider-authored free-form comments/issues) into the agent’s LLM context via the GitHub API/webhook payload.