csv-data-summarizer

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs point to direct downloads and release pages hosted in a personal/unknown GitHub repository (coffeefuelbump) — a common vector for distributing arbitrary code/archives that may contain malicious payloads and are not from an established vendor.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill ingests and LLM-generates output from outsider-authored CSV contents via the required runtime workflow path summarize_csv(file_path) → pd.read_csv(file_path) (parsing arbitrary user-provided CSV text).