claude-design

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Two input URLs embed user credentials/tokens in the URL (userinfo@...), which is a high-risk pattern because it leaks secrets and can point to private resources or be abused to fetch/install binaries; the other URLs (claude.ai, github.com, example.com) are standard and not suspicious here.