directory-submissions

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Two entries are suspicious: gptforge.net is flagged in the project references as a recently created/implausible domain (possible fake/typosquat) and www.4shared.com is a public file‑sharing host that can be used to distribute unvetted executables — both increase the risk of malware distribution.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Le workflow “Soumettez votre produit aux annuaires …” ingère uniquement le texte libre fourni par l’utilisateur (p. ex. les 9 réponses d’évaluation/les infos de lancement) pour générer des descriptions/variantes, et ne lit pas de texte tiers outsider (telles que issues/PR, tickets, emails, commentaires ou pages web) avant de sélectionner un item.