research-dojo

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Both URLs point to personal GitHub repositories referenced as installation sources (npx/remote-install), which is high-risk because running code from unvetted individual repos can execute untrusted binaries or scripts and these accounts/repos lack known, established reputations.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md mandates “targeted web searches” in Step 4 (Evidence Audit & Grounding), which at runtime can fetch and ingest outsider-authored free text from public web pages into the LLM context.