higgsfield-websites

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The list includes a direct raw GitHub shell installer (curl | sh) which is a high-risk pattern for remote code execution and potential malware distribution.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL runtime ingests only user-provided brief text via the CLI intake and may use it to generate prompts/assets, but it does not read arbitrary outsider-authored free text from an external queue/feed/inbox at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's prerequisites include a runtime installation step that runs remote shell code via curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh, which downloads and executes code required for the CLI used by the skill.