linkfox-aba-intelligent-query

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The link to https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip is a direct downloadable archive for installing a skill hosted on a file-hosting subdomain (a high-risk pattern for distributing executables), while the other URLs are API/docs endpoints and not direct installers.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The SKILL.md instructs the agent at runtime to download and install an onboarding skill from https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip (i.e., fetch a ZIP and install a skill), which would fetch and install remote code that can control agent behavior.