sf-onboard

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a personal GitHub repository referenced as the source for npx/CLI installs — running code directly from an unverified GitHub user can execute arbitrary binaries/scripts, so it is potentially suspicious unless the project and maintainer are verified (stars, forks, releases, audit of code).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs runtime commands that fetch-and-run remote packages — e.g. "npx github:huangrx6/SpecForge init --dir .", "npx skills add https://github.com/huangrx6/SpecForge" and the git+ssh package URL "git+ssh://git@git.company.com/team/specforge.git#v0.3.0-company.1" — which download and execute external code at runtime and are relied on for initialization/upgrades.