xurl

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Most URLs (x.com post, GitHub repo, API endpoint) are benign, but the direct raw GitHub install.sh (curl|bash) and the unfamiliar registry domain clawhub.ai are high‑risk distribution vectors that could deliver malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow can ingest outsider-authored free text when it fetches and returns X content (e.g., xurl read, search, timeline, mentions, dms), where the LLM receives the post/user text from the X API response JSON.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's installation step includes a shell command that fetches and executes remote code (curl -fsSL https://raw.githubusercontent.com/xdevplatform/xurl/main/install.sh | bash), and the xurl CLI installed by that script is a required dependency for the skill.