moonbit-skills

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most URLs are documentation on seemingly official domains, but the explicit direct installer (https://www.moonbitlang.com/install.sh) and the recommended "curl | bash" pattern constitute a risky distribution vector unless you verify the script and domain authenticity first.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to search for and fetch packages from the public Mooncakes registry and to add/update arbitrary packages (see moonbit-packages SKILL.md and the SKILL.md command list with "mooncakes-search", "moon add username/package" and links to https://mooncakes.io), which are untrusted, user-published third‑party contents that the agent would ingest and that can materially influence subsequent tool actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill repeatedly instructs running a remote installer via "curl -fsSL https://www.moonbitlang.com/install.sh | bash", which fetches and executes remote code during setup (a required runtime dependency), so it directly executes external code.