scratchpad

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a GitHub repository from an individual account that the README explicitly instructs you to clone/use via npx or git — personal GitHub repos can host arbitrary code and, without clear provenance or community reputation, are a plausible vector for distributing malicious scripts or executables.