beadboard-driver

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The links point to a GitHub repository (user "zenchantlive/beadboard") that the skill instructs users to clone and run installation commands (git clone + npm install -g .), which is an unverified third‑party source used to install/execute code — a high‑risk pattern for malware distribution.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the workflow reads free-text from BeadBoard’s control-plane inbox/messages via bd mail inbox and bd mail read (delegated to bb agent inbox/read), so outsider-authored message bodies/subjects can be ingested without selecting a specific item in advance.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). This skill includes a runtime bootstrap command that clones and installs code from https://github.com/zenchantlive/beadboard.git (git clone ... && npm install && npm install -g .), which fetches remote code and then executes it as a required dependency for installing the bb CLI.