agentic-security-scanner

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The list includes a direct remote payload URL (https://evil.example.com/payload) explicitly used with a curl | bash example — a high-risk distribution pattern — while the GitHub, OWASP, and schemastore URLs are legitimate/benign references.