pict-test-designer

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs include direct downloadable release ZIPs hosted in a third‑party GitHub repository (omkamal/pypict-claude-skill) which are common vectors for distributing unverified code — treat downloads from unvetted personal repos/releases as suspicious until verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests outsider-authored free text directly from the user’s “requirements or code” prompt and uses it to analyze parameters/values/constraints and generate the PICT model and test cases.