ubs

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs point to raw install scripts and release assets hosted in a personal GitHub repo and a personal Scoop bucket/tap — curl|bash installers and direct release downloads from unverified personal accounts are common vectors for distributing malicious binaries/scripts and therefore should be treated as suspicious until verified.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The repository includes an explicit "Remote Compilation Helper" that offloads builds to external Contabo VPS workers and multiple automated installer/hooks (curl|bash, auto-wiring agent hooks, pre-tool hooks) that would send code or trigger remote execution without clear user opt-in, posing high risk of code exfiltration / remote execution and supply‑chain abuse.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). Multiple files include curl commands that fetch and pipe remote scripts to bash (e.g., "https://raw.githubusercontent.com/Dicklesworthstone/ultimate_bug_scanner/main/install.sh?$(date +%s)" and https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh), which clearly perform remote code download-and-execute during install/CI/runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill instructs running a remote curl | bash installer and writing the binary to /usr/local/bin (requires elevated privileges), and also offers a "ubs doctor --fix" that may auto-install dependencies — all of which push the agent to modify the host system state and potentially perform privileged operations.