publish-linkedin-post

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The raw.githubusercontent.com link fetches and executes a remote setup.sh (a direct .sh from a third‑party GitHub repo), which is high risk for remote code execution; the example.com image and the 127.0.0.1 health check are benign, but the executed remote shell script makes the overall source suspicious.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The skill downloads and execs a remote setup script at runtime and installs/uses a local daemon + Chrome extension that can control the browser session — this is a high supply-chain / remote-code-execution risk and could be abused as a backdoor to access or exfiltrate data from the user's browser/session.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's setup wrapper (scripts/setup.sh) downloads and then execs remote code at runtime from https://raw.githubusercontent.com/FinpeakInc/frevana-cli-releases/refs/heads/main/skills/frevana/scripts/setup.sh, which is executed (exec bash) and is a required dependency for the skill.