higgsfield-soul-id

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The skill instructs piping a remote shell script into sh from a raw GitHub URL (https://raw.githubusercontent.com/...), which is a direct .sh download-and-execute from an unvetted source and a common malware distribution vector.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill installs the @higgsfield/cli at runtime by running a remote shell script fetched and executed via curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh, which downloads and executes remote code required for the skill to run.