linkfox-ruiguan-utility-patent-detection

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Contains a direct ZIP download link (release.zip) that instructs the user to unpack and install a skill—this is a common malware distribution pattern and should be treated as suspicious unless the publisher and file integrity are verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text can enter the agent context via the runtime API response: the script calls POST /ruiguan/utilityPatentDetection, then prints the full JSON to stdout when --inline is used or the response is ≤8KB, and that stdout is typically ingested into the LLM context; the response includes outsider patent text fields like title, patentAbstract, claims, specification, etc.