resource-scout

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs point mostly to third‑party marketplaces, community GitHub repositories and unofficial directories that host user-submitted skills/MCPs (potentially including binaries or install scripts) and therefore represent a moderate-to-high risk of unreviewed/malicious code distribution.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md describes a runtime workflow that searches public web/GitHub marketplaces and then “Review SKILL.md” / “Install” a discovered skill or MCP; if the agent fetches outsider-authored repository pages/docs at runtime and ingests their SKILL.md/relevant markdown into the LLM context, that is an outsider free-text injection path via public browsing.