janitor-discover

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). All three URLs point to personal/unknown GitHub repositories (not official vendor pages); GitHub repos can host scripts or releases that distribute executables and only the SKILL.md is scanned by the pre-check, so these are potentially risky until inspected further.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md states that pre-install mode (discover.sh → precheck.sh) on a GitHub URL fetches the candidate repo’s SKILL.md and runs security.sh/overlap analysis on that fetched text, meaning outsider-authored content is ingested without selecting a specific item beyond the URL/repo provided.