holiday

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These are prebuilt executables packaged as GitHub release tarballs from an individual/unfamiliar account and the install pattern (curl | tar && sudo mv) is a common vector for malware, so treat them as suspicious unless you can verify the publisher, checksums/signatures, or build from source.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). 该技能在运行时会调用 timor.tech 的公共假期 API 获取节假日名称/状态等文本，属于“公共 web 内容/公共 API 返回的外部文本”进入 LLM 上下文的路径。

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The prompt's install instructions explicitly run sudo to move a binary into /usr/local/bin, which modifies system directories and requires elevated privileges (so it instructs changing machine state), though it does not ask to create users or bypass security mechanisms.