linkfox-seerfar-ozon-shop-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL (the agent-files.linkfox.com release.zip) points to a downloadable archive with explicit instructions to "install this skill" (and to prompt the user for authorization to download), which is a common vector for distributing arbitrary/native code and therefore potentially risky; the other URLs are API/endpoints and documentation and appear benign.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL.md instructs at runtime to download and install external skill code from https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip (used as a remedy for missing onboarding.md), which would fetch and install remote executable code that can control agent behavior.