serve-model

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Two URLs are direct curl|sh install scripts hosted on small/unverified domains (pixi.sh and astral.sh), which is high-risk because running remote install.sh files executes arbitrary code; the other URLs are local endpoints or recognized package/vendor indexes and are not flagged.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL.md includes explicit install commands that fetch and execute remote install scripts (curl ... | sh) from https://pixi.sh/install.sh and https://astral.sh/uv/install.sh, which downloads and runs remote code at runtime.