source-command-verify-setup

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is a personal GitHub repository (unknown user) referenced as a source for copying and running hook scripts—downloading and executing shell scripts from an untrusted/low‑profile repo is a common malware distribution vector.