baoyu-format-markdown

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The code is mostly a benign markdown formatter, but it invokes an external npm package at runtime via npx (applyAutocorrect), which will fetch and execute remote code by default—this is a supply-chain / remote-execution risk that could be abused to run arbitrary code on the host.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's scripts/autocorrect.ts calls npx at runtime (spawnSync(["npx","autocorrect-node",...])) which will fetch and execute remote code from the npm registry (e.g. https://registry.npmjs.org/autocorrect-node) and the formatter enables spacing/autocorrect by default, so this external package is fetched and executed during normal runs.