jabraf-workflows-wait-cf-pages

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These links point to a third‑party GitHub repository and a GitHub Actions composite action published by an individual account — while not a direct executable or shortener, using unvetted actions from an unknown repo can execute arbitrary commands in your CI so you should review the action source, prefer pinning to a commit SHA, and treat it as moderately high risk.