manage

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Several URLs point to direct downloadable executables hosted on a personal blog (techy-notes) and to GitHub release assets from a small/third‑party fork (Satsuoni) — direct .zip/.exe downloads from non-official/low‑reputation sources are high-risk even when the workflow adds SHA checks.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In manage action update, scripts/check-drift.sh ingests network-fetched content/metadata from outsider-authored sources (techy-notes.com article and epubor companion page) via curl/gh api checks without isolating or sanitizing for indirect prompt-injection-style text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's setup/update actions download and later run remote binaries/artifacts at runtime (e.g., https://kindleforpc.s3.amazonaws.com/70980/KindleForPC-installer-2.8.70980.exe, https://github.com/Satsuoni/DeDRM_tools/releases/download/v10.0.28/DeDRM_tools.zip, and https://techy-notes.com/content/files/2026/04/Kindle_Key_Finder_2026.04.28.JH.zip), and it also queries the GitHub releases API (https://api.github.com/repos/Satsuoni/DeDRM_tools/releases) to choose which archive to fetch — these are runtime external dependencies that provide executable code the workflow relies on.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs creating and removing Windows firewall rules, applying and removing ICACLS locks, running admin PowerShell scripts, installing/uninstalling applications and deleting system-level cached installers — all stateful, privileged modifications to the host machine.