post-task-learning-review

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The GitHub repo is an untrusted/unknown third-party source that the skill instructs you to fetch via npx and run an included install.sh (which would execute code and modify local agent config), so it is a suspicious source for distributing executable scripts.