tooluniverse-claude-code-plugin

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The only high-risk item is the direct shell installer (https://astral.sh/uv/install.sh) which the skill tells users to curl | sh — executing a remote .sh from an external domain is a common malware vector; the GitHub and PyPI links and claude.com are standard/official sources and are not suspicious by themselves.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). I flagged these URLs because the skill includes commands that fetch and execute remote code at runtime (e.g., curl -LsSf https://astral.sh/uv/install.sh | sh), and it instructs cloning/downloading plugin code (git clone https://github.com/mims-harvard/ToolUniverse.git and https://github.com/mims-harvard/ToolUniverse/releases) and automatically downloads/executes the tooluniverse package from PyPI (https://pypi.org/project/tooluniverse/) which all meet the criteria for remote code/control during install/runtime.