watchpost

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The localhost endpoints themselves are benign, but the skill explicitly directs users to download and execute a raw .sh installer from an unverified GitHub user (endlessblink) without verification—running arbitrary shell scripts from the internet is a significant risk for malware, privilege escalation, or data exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs downloading and running a public GitHub script (curl "https://raw.githubusercontent.com/endlessblink/watchpost/main/install.sh") and also reads tasks via the Watchpost API (/api/master-plan) from MASTER_PLAN.md, meaning it fetches and ingests public/user-generated content that can materially affect execution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill fetches and then executes a remote install script at https://raw.githubusercontent.com/endlessblink/watchpost/main/install.sh (curl to /tmp/wp-install.sh followed by bash), which runs remote code at runtime and therefore directly controls agent execution.