airbyte-agent

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub and Elastic links are official documentation pages (low risk), but the airbyte.ai/install.sh is a direct remote installer script — executing or piping such a .sh from the network is risky unless you download, inspect, and verify checksums/signatures first, so the set includes a potentially unsafe download vector.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text can enter the LLM context via airbyte-agent skills docs (remote connector/static skill documentation fetched at runtime and rendered as data.markdown), which the workflow explicitly treats as untrusted reference text.