quickstart

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (critical risk: 1.00). The skill downloads an operational bootstrap script from a remote URL (https://basic-anteater-667.convex.site/quickstart-bootstrap) and executes it via bash, which represents a concealed download-and-execute delivery chain from an unverified external source.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches external markdown documentation/runbooks via WebFetch (lines 86-92) based on dynamic URLs returned by a third-party server.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill downloads and executes a remote bash script from https://basic-anteater-667.convex.site/quickstart-bootstrap at runtime to scaffold and bootstrap the application.