data-analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). This URL is suspicious because it points to a direct shell installer (install.sh) on a third‑party domain and the skill explicitly instructs piping it into sh — a high‑risk pattern unless the domain and script contents are verified as legitimate.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The document enforces use of a third‑party package manager installed via a remote "curl | sh" installer and forbids standard tooling, which is a high-risk supply‑chain/remote‑execution vector (possible malicious post‑install scripts or backdoor), while the rest of the skill text contains no explicit exfiltration, credential theft, or obfuscated execution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires running remote install code at runtime via "curl -LsSf https://astral.sh/uv/install.sh | sh", so the URL https://astral.sh/uv/install.sh fetches and executes remote code that the skill depends on.