xparse-doc-tools

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These are direct links to a remote .sh and .ps1 installer (curl|bash and irm|iex usage) — a high-risk pattern for malware distribution unless the hosting domain and binary are independently verified.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document includes remote install commands that fetch and execute scripts from external URLs (curl|source and irm|iex), a high-risk supply-chain / remote code-execution pattern that can enable arbitrary code delivery.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The Skill includes install commands that fetch and execute remote scripts (curl ... https://dllf.intsig.net/download/2026/Solution/xparse-cli/install.sh and irm https://dllf.intsig.net/download/2026/Solution/xparse-cli/install.ps1 | iex), which run arbitrary code and are required to install the xparse-cli dependency.