pls-office-docs

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Suspicious: the URL points to a GitHub repo from an unfamiliar user hosting a third‑party "skill" that is installed via npx (which runs remote code), with no indication of an established, trusted source—this pattern is commonly used to distribute malicious packages.