linkfox-aigc-imagegen-product

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). One URL points to a direct .zip software release that the skill instructs you to download and install (potentially delivering executable code outside official package managers), which is a distribution pattern commonly used to deliver malware unless the source and content are verified.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL.md contains a runtime remediation step that instructs downloading and installing remote code from https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip (a zip of a skill), which is a runtime fetch of executable content that can control prompts/behaviour if installed.