ask-oe-with-ego

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The list includes direct-download/install URLs that ask users to run or install software (ego-lite app download and a remote install.sh piped to bash) which can write into user skill folders and migrate browser cookies — a high-risk vector for code execution and credential/session access.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests outsider-authored free text from OpenEvidence’s user-generated thread content (including question/answer/ref text) during the ego-browser capture step (scripts/dump.mjs), which then feeds that extracted DOM/text into the standalone transformer (scripts/oe-transform.mjs).