shiploop

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub repo https://github.com/steipete/clawdis is a third‑party repository referenced as an installable skill (npx install) in the skill, which could execute untrusted code if installed; the other two URLs are benign example issue links.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md’s required runtime workflow delegates phase implementation to an implementer CLI using the GitHub issue URL as the prompt seed, and that issue body is outsider-authored free text (GitHub issue content/comments from non-operator users) that can be ingested into the LLM context via the implementer’s “Implement GitHub issue exactly as specified there” instruction.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The file references/gates.md includes a runtime install command that fetches and executes remote code via "npx skills add https://github.com/steipete/clawdis --skill autoreview", meaning the skill can download and run code from https://github.com/steipete/clawdis during execution.