agentic-enrollment

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs point to remote install scripts and a direct install endpoint (install.sh, install.ps1, /cli) on a non-obviously well-known domain and are referenced in curl|bash and PowerShell iex install commands — a common vector for malware distribution and thus suspicious.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL's setup includes installer commands that fetch-and-execute remote scripts (curl ... https://inflowcli.ai/install.sh | bash, irm https://inflowcli.ai/install.ps1 | iex, curl ... https://inflowcli.ai/cli | bash), so these URLs are runtime dependencies that execute remote code.