higgsfield-generate

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The raw.githubusercontent.com link (https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh) is used in a curl | sh install command in the skill, and direct shell-install scripts fetched from the web and piped to a shell are a high-risk distribution vector for malware even if hosted on GitHub.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs at runtime to fetch and execute a remote installer script via curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh to install the required CLI, which downloads and runs remote code.