linkfox-zhihuiya-patent-forward-citation

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The item "https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip，解压后安装这个skill..." is a direct downloadable installation archive referenced in the skill (requiring the user to install software), which is a common vector for malware distribution and should be treated as suspicious until verified and authorized by the user/maintainer.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text can enter the LLM context via the runtime API response (citedOthers / citedPatents fields) returned by POST /zhihuiya/patentForwardCitation, which the script prints to stdout (full JSON when --inline or response ≤ 8KB, otherwise a summary that still includes samples), and that stdout is typically ingested into the agent’s LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's runtime remediation step explicitly directs downloading and installing remote code from https://agent-files.linkfox.com/skills/linkfox-onboarding/release.zip (a release ZIP for the linkfox-onboarding skill), which would fetch remote code that could be executed or alter agent behavior.