linkfox-amazon-opportunity-search-by-metrics

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The URL pointing to https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip is a direct downloadable archive hosted on a file-serving subdomain with explicit instructions to extract/install — a common distribution vector for malware; the other listed URLs are API/docs endpoints and appear low risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's runtime error-recovery instructions tell the agent to download and install a remote skill ZIP (https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip), which would fetch remote code that could be executed and thereby control agent behavior.