amazon-price

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The Amazon and localhost URLs are benign examples, but the raw.githubusercontent.com link downloads and execs a remote .sh from an external GitHub repo (FinpeakInc/frevana-cli-releases), which is a high-risk pattern (direct .sh fetch+exec from an unverified account) and could be used to distribute malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow sends the user-supplied Amazon product URL (outsider-provided free text) as the prompt argument to the local frevana_ask tool via frevana call frevana_ask '<json_args>', which can cause the daemon/Chrome extension to fetch and ingest arbitrary Amazon page content into the tool’s response that is then returned to the agent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The bundled setup wrapper (scripts/setup.sh) downloads and execs a remote script at runtime from https://raw.githubusercontent.com/FinpeakInc/frevana-cli-releases/refs/heads/main/skills/frevana/scripts/setup.sh (curl -o ...; exec bash), which executes remote code required for the skill.