nssfc-proposal

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The URL points to a raw .sh install script on a personal GitHub repository and the skill's recommended "curl | bash" install pattern means executing unreviewed shell code from an individual account — a common vector for malware and therefore suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's required workflow (Phase 2 / references/LITERATURE_SEARCH.md) explicitly instructs the agent to fetch and ingest public third-party literature (e.g., CNKI, 万方, JSTOR, NBER) including running qinyan-paper-search commands (wanfang/google) and checking the CNKI/国家社科基金 project database URL, so the agent will read untrusted external web content that can materially influence its outputs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes an installation command that pipes a remote script to bash (curl -fsSL https://raw.githubusercontent.com/LeonChaoX/qinyan-academic-skills/main/install.sh | bash ...), which fetches and executes remote code during setup and is presented as a required installation dependency.