world-cup

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The raw.githubusercontent.com link is a direct install.sh (remote shell script) — a high-risk download/execution vector unless the GitHub repo and account are verified; the skills.sh URL is a documentation page and not itself a direct executable download.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow connects the agent harness to a hosted MCP server (SKILL.md:11-13, 46-49), and the agent then calls tools like worldcup-fan-sentiment-context that explicitly pull “Social / news pulse from live X + web,” meaning outsider-authored free text from public web/social sources can be ingested into the LLM context via MCP tool outputs at runtime.