linkfox-etsy-category-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Contains a direct download to a release.zip hosted on agent-files.linkfox.com with instructions to extract and install a skill (a high-risk pattern for distributing executables/third‑party code outside official package managers).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs at runtime to download and install an external skill archive that would provide executable skill code and guidance (https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip), so this URL can deliver remote code that controls agent behavior.