linkfox-google-trend-get-trend-by-keys

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL points to a direct downloadable release.zip on agent-files.linkfox.com and is referenced in the skill as an installer to download and run, which is a common vector for malware distribution when not from a verified official vendor.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text can enter the LLM context via the runtime API response body from POST /googleTrend/getTrendByKeys (returned JSON is printed to stdout and thus becomes LLM-readable), and that response content is not authored by the operating user.