socket-sca

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Both URLs are suspicious: one is a direct .sh installer (https://example.com/setup.sh), which is a common malware distribution vector, and the other (https://evil.example.com) uses an untrusted/"evil" host name suggesting a potentially malicious or placeholder domain.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly runs the Socket CLI and parses its JSON scan output as a mandatory workflow step ("socket scan create --json .", workflow step 3c) and also instructs checking public registries/lists (e.g., "Search package names against public malicious package lists", npm/PyPI metadata) — all are open third‑party sources whose content the agent ingests and uses to drive findings and remediation decisions, so untrusted content could influence actions.