project-understanding

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The URL points to a GitHub repository owned by a low‑signal/random-looking username with zero stars (an untrusted/new account), which are higher-risk sources for distributing malicious binaries or trojanized code.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow is “Full Project Analysis” which (per SKILL.md) scans and reads the target project’s files/configs at runtime (e.g., package.json, source, docs), so if the operating user points it at a repo/branch/PR authored by someone else, that outsider-authored free text (source/docs/issue-like content) can be ingested into the LLM context via the project file-reading path.