mr

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs point to a GitHub repo and a raw install.sh that the skill instructs users to curl | bash — executing a remote shell script from an unverified account is a high-risk distribution vector for malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs at runtime to run a remote installer via curl -fsSL https://raw.githubusercontent.com/JUNERDD/mr/main/install.sh | bash, which fetches and executes remote code (https://raw.githubusercontent.com/JUNERDD/mr/main/install.sh).