portfolio-manager-agent

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These links point to an unknown GitHub account with a zero-star repo and an install command that curls raw content (plus a third‑party registry URL) — a common pattern for distributing unreviewed scripts that could be malicious.