geoly-mcp

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The package instructs running remote install scripts directly (curl | sh and irm | iex) from geoly.ai and a raw GitHub mirror — executing fetched shell/PowerShell scripts is a high-risk distribution vector that can deliver malware even if the domain appears legitimate.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). Documentation includes instructions that enable remote code execution and a risky auto-authorize flow (curl|sh, PowerShell iex, ExecutionPolicy Bypass, and agent-run shell login) that are high-risk supply-chain/RCE primitives which could be abused for backdoor installation or credential capture.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests outsider-authored free text via the public-tool resolver search_public_entities (free-text query) and then uses the resolved entities to fetch further public intelligence results from GEOly.