calligraph-sensei

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The URL points to a GitHub repository from an unverified/unknown user used as a direct install source (npx installs can execute repository code), which is a potentially risky distribution vector for malicious payloads.