higgsfield-websites

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Multiple entries are untrusted/third‑party hosts (small or typo‑like domains and personal Cloudflare Worker subdomains) plus a direct raw GitHub install.sh invoked with curl|sh — these are high‑risk because unverified remote JSON/scripts or install scripts can deliver or trigger arbitrary code.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Higgsfield CLI build/publish workflow ingests user-provided brief text and uses it to generate cover/OG assets and other prompts (e.g., references/app-cover.md “Brief” inputs like og_title/scene concept are fed into model prompts), so outsider-authored free text can flow into runtime generation steps.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs at runtime to install the CLI by piping a remote script to a shell (curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh), which fetches and executes remote code and is a required prerequisite if the CLI is missing.