fastfish-hot

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The http://127.0.0.1:8900 links are just local UI endpoints, but the GitHub repo https://github.com/superxs777/fastfish-hot is an unvetted third‑party repository that the instructions ask you to git clone and pip install (executing remote code), which is a supply‑chain risk and could be used to distribute malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). 该 Skill 的运行时会执行 get_hot_now.py/fetch_hot_items.py 去“拉取热点”（从外部平台抓取/获取网页或内容），这些网页/抓取文本属于 OUTSIDER（公共网页内容）并会被脚本处理后以可读文本形式进入 LLM 上下文用于生成输出。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly directs cloning and installing code from https://github.com/superxs777/fastfish-hot and then running its Python scripts (pip install -r requirements.txt; python scripts/...), so remote repository content is fetched and executed as a required dependency.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)