meta-ads-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The localhost health check is benign, but the raw.githubusercontent.com URL downloads and executes a shell setup script from a third‑party GitHub repo—running remote scripts from an unverified repository (raw .sh) is a common malware distribution vector and therefore suspicious.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The bundled scripts/setup.sh downloads and then execs remote code at runtime from https://raw.githubusercontent.com/FinpeakInc/frevana-cli-releases/refs/heads/main/skills/frevana/scripts/setup.sh, which directly executes fetched code and is required for the skill to run.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to download and execute an external setup script that installs a local binary and starts/checks a daemon (modifying system state and potentially requiring elevated privileges), which is a security-sensitive operation even though it doesn't explicitly ask for sudo or to create users.