gitlab-api-core

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These are legitimate-looking GitLab API and repo URLs (self-hosted example domain) but they include a direct package download (file.tar.gz), an HTTP git clone with embedded deploy credentials and an example private_token-in-URL — not inherently malicious but insecure patterns that can easily be abused to distribute malware if repos or tokens are compromised, so treat as medium-high risk.