mcp-client

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is potentially suspicious because it links to a GitHub repository from an untrusted/unknown user that appears to distribute runnable code (installed via npx/clawhub), has no evidence of being an official or well‑established project, and installing/running such packages can execute arbitrary code.