supply-chain-security-scanner

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs include direct links to raw GitHub-hosted install scripts (raw.githubusercontent.com/anchore/*/install.sh) that are often piped straight into a shell in CI/README examples — a high-risk distribution pattern because remote executable scripts can be tampered with or used to deliver malware even when hosted by reputable projects.