zbook

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs include an unknown GitHub repo that automates downloads from Z-Library and direct links to the Z-Library domain/rpc.php — an illicit ebook host whose downloads can be abused to distribute malicious or tampered files and is therefore untrusted.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The outsider-authored free text (“书名或作者/ISBN” passed as the skill’s query, e.g., what the user says) flows into run() → zlib_search(..., query) where it is URL-encoded and POSTed as the message parameter to Z-Library’s /eapi/book/search, before selecting a dl_url and downloading.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs using Playwright to "绕 Cloudflare" (bypass Cloudflare protections) and recommends pip install with --break-system-packages, which encourages bypassing remote protections and altering system-level packages, so it pushes actions that can compromise machine state or security boundaries.