pipa-audio-brief

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These URLs include an internal cloud-metadata address (sensitive) and multiple direct binary/model downloads hosted in a GitHub release from a single, non-obvious user (direct executable-like assets and a malformed release URL), which are common high-risk vectors for replacing or distributing malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source extraction ingests user-provided free text/URLs (public http/https, pasted markdown/text, or local exported text) at runtime via Step 1–2 (“Read Source Or Block Clearly” using references/source-extraction.md), which an outsider can supply through the skill’s input.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains an explicit runtime install command that pipes a remote script to the shell (curl -fsSL https://here.now/install.sh | bash), which fetches and executes external code during setup.