himalaya

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is a direct raw GitHub-hosted install.sh fetched via curl|sh: although it appears to come from a public GitHub repo (pimalaya/himalaya), executing an unreviewed remote shell script is a high-risk pattern that can distribute malware unless you verify the repository, inspect the script contents, and prefer official package managers or signed releases.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly reads and processes email messages from external IMAP servers (see SKILL.md commands like "himalaya envelope list" and "himalaya message read 42" and the IMAP backend configuration in references/configuration.md), which are untrusted, user-generated third‑party content that can be interpreted and used to drive replies or other actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's installation step recommends running "curl -sSL https://raw.githubusercontent.com/pimalaya/himalaya/master/install.sh | PREFIX=~/.local sh", which fetches and immediately executes a remote shell script (remote code) at runtime.