check-reasonix-update

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These point to GitHub Releases for an obscure/unknown repository (esengine/DeepSeek-Reasonix) — GitHub releases can host binary executables and are a common malware delivery vector when the author/account or release assets are untrusted or unknown.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md 第2/4/5步要求在运行时用 web_fetch 读取 GitHub Releases 页面与 release 详情页的正文（outsider-authored public web content），并将其“逐条翻译/分类整理”后写入生成的 Markdown 报告，从而把外部自由文本进入LLM上下文。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill uses web_fetch at runtime to retrieve GitHub release pages (https://github.com/esengine/DeepSeek-Reasonix/releases and https://github.com/esengine/DeepSeek-Reasonix/releases/tag/vX.X.X), and that fetched release content is parsed and injected into the agent's processing flow to drive summarization/translations, so it directly controls the agent's prompts/outputs.