ui-ux-pro-max

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs point to an untrusted/low-visibility GitHub repository (0 stars) and raw GitHub/raw content plus an obscure third‑party registry entry and an install curl command that would download files into a local skills folder — a common vector to distribute scripts or malicious content.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md Step 2 (Search Relevant Domains), the runtime invokes search.py with keywords from the outsider’s user request and searches multiple domains, meaning the agent may ingest free-text results from sources it queries.