skill-security-auditor

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs are suspicious: the GitHub repo links are generic/unknown sources that can host malicious code or installers, and the explicit "evil.com/collect" endpoint looks like an exfiltration/malicious URL, so together they indicate high risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill clones arbitrary git repositories (clone_repo in scripts/skill_security_auditor.py / SKILL.md examples) and reads/parses SKILL.md and other repo files (scan_skill/scan_file_prompt_injection), so it ingests untrusted, public third-party content (GitHub/repos) that can directly influence its audit verdicts and follow-up decisions.