linkfox-jiimore-get-niche-info

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL points to a direct downloadable release.zip (agent-files.linkfox.com/skills/linkfox-onboarding/release.zip) with an explicit instruction to "download and install" the skill — a common malware distribution pattern (direct archive of executable content and an instruction to install), so it should be treated as suspicious until verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text can enter the LLM context via the runtime API response from the external Jiimore service (public/third-party data), which the script prints to stdout (full JSON when ≤8KB or when --inline is used), and that stdout is then available to the agent/LLM.