reactorpro-doc

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Mixed signals: while react.dev and official marketplace/plugin pages are legitimate, the presence of a GitHub releases page and a project-branded subdomain (ReactorPro.hotovo.com) that distribute native installers (.exe/.dmg/.AppImage) from a relatively small/unknown project represents a plausible malware distribution vector unless you verify the publisher, checksums/signatures, and community reputation.