publish-twitter-post

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Suspicious because the skill downloads and immediately executes a raw script from a GitHub repo (raw.githubusercontent.com) fetched from the repository's main branch (un-pinned), which is remote code execution from an externally controlled source and a common malware distribution pattern.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill downloads and directly execs an unverified remote setup script (and invokes that wrapper before every run), creating a clear supply-chain remote code execution vector that could be used to install backdoors or exfiltrate data.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The bundled setup wrapper (scripts/setup.sh) downloads and execs remote code at https://raw.githubusercontent.com/FinpeakInc/frevana-cli-releases/refs/heads/main/skills/frevana/scripts/setup.sh during runtime (via curl and exec), and that download is a required setup step for the skill.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill repeatedly instructs running a bundled setup script that downloads and executes remote install code (scripts/setup.sh → raw.githubusercontent.com), which will modify the host (install/run a local daemon and change system state) and thus pushes the agent to perform potentially privileged, state-changing operations.