odoo-connector

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The URL points to content in an unrecognized GitHub account (not an established vendor) and the skill is installed via npx (which executes remote code), so although it’s not a direct executable link it can be used to distribute malicious code if the repository is untrusted.