configure-edt

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is an unvetted GitHub repository from an individual account (0xDragoon); while it isn't an explicit direct executable download, cloning and running its install scripts (npm install, ./install.sh) could execute arbitrary code, so it poses a moderate-to-high risk unless you verify the repository's contents and author.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The manual install instructs cloning and executing remote code via "git clone https://github.com/0xDragoon/everything-design-taste.git" followed by running "./install.sh", which fetches and runs repository content that installs skills/agents/rules that directly control agent prompts and behavior.