container-security

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The direct link to example.com/app.tar.gz is suspicious because it’s an unknown domain serving a downloadable archive (a common malware vector), while private.npm.com is an unverified custom npm registry that isn’t inherently malicious but should be treated cautiously and accessed via proper credentials and build-time secrets.