huawei-cloud-skill-audit

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Two proxy/redirect URLs (gh.ddlc.top and gh-proxy.com) point to GitHub release download paths that can deliver direct binaries while obscuring the real origin, which is a common malware distribution pattern; the other links are official documentation or code-hosting pages and are not suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests outsider-authored free text by reading files from the user-supplied --target skill directory (e.g., arbitrary .md/.py content) and scanning it for prompt-injection strings via the built-in skillspector and gitleaks checks.