verasic-agent-disclosure

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The raw GitHub URL points to an executable installer script (curl|bash pattern) hosted in a third‑party repo—this is a high-risk supply‑chain vector; the cursor.com docs and the repo SECURITY.md page are benign references.