nsfc-proposal

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The URL is a raw .sh installer hosted in a personal GitHub repo (intended to be piped to bash), which means executing unreviewed remote shell code from an untrusted account — a high-risk vector for malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL explicitly instructs the Agent in Phase 2 (文献检索) and references/LITERATURE_SEARCH.md to call external search tools (qinyan-paper-search, WebSearch/WebFetch) to fetch public sources such as Google Scholar, PubMed, ArXiv and 万方, meaning the agent will ingest and act on untrusted third‑party web content as part of its workflow.