pm-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Directly cloning and installing code from an unrecognized GitHub user (https://github.com/konglong87/anysearch.git) is suspicious because it's an unofficial repository that could contain arbitrary scripts or executables executed in the environment.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md 的运行流程会通过 AnySearch/Exa MCP/WebSearch 执行搜索并进行全文提取（如 anysearch_cli.py ... extract "URL" 或 fetch），从而让代理在运行时读取外部网页/搜索结果中的任意文本内容。