academic-research-suite

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These links include a GitHub release from an unfamiliar user (possible arbitrary binary release), a direct .sh installer URL, and a personal file-hosting domain — all high-risk indicators for distributing executables or scripts that could contain malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In ars/academic-paper-reviewer (e.g., devils_advocate_reviewer_agent.md), the required runtime expects and reads the “paper draft and all provided artifacts” supplied by the caller/user, meaning outsider-authored free text can be ingested as paper content/artefacts without selecting a specific trusted item first.