ubs

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Several links point to raw GitHub content and direct installer scripts/releases from a single personal GitHub account (e.g., raw.githubusercontent.com install.sh and curl|bash install patterns for Dicklesworthstone/ultimate_bug_scanner), together with other placeholder/unknown hosts — direct script/executable downloads and GitHub releases from an unfamiliar user are high-risk distribution vectors even though some URLs are to legitimate vendor sites.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes runtime fetch-and-execute installer/module downloads (e.g., curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/ultimate_bug_scanner/main/install.sh | bash" and lazy module/helper downloads from raw.githubusercontent.com/Dicklesworthstone/ultimate_bug_scanner/...), which will download and execute remote code at runtime and are required for the tool to operate.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill includes explicit installation commands that write to system paths (e.g., /usr/local/bin), a curl | bash installer, and a "doctor --fix" auto-fix which can install dependencies — all of which push an agent to modify the host system and potentially require elevated/sudo actions.