video-frame-reader

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The claude.ai link is an official vendor page (low risk), but the git clone URL points to an unspecified/personal GitHub repository (https://github.com/YOUR_USERNAME/video-frame-reader.git) which is an unverified/placeholder source — untrusted GitHub repos can host arbitrary code and are higher risk for distributing malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path reads outsider-authored free text via the user’s provided “intent” (Step 1/Step 5 in SKILL.md), which is directly interpolated into the subagent prompt.