tiktok-crawling

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is a link to a personal GitHub repo (unknown/unverified user) referenced as the commit source for a skill that is installed via npx (which runs remote code), and the repo/owner mismatch raises trust concerns — untrusted GitHub code + npx installation is a potential malware distribution vector.