jupyter-notebook

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub clone URL points to external code from an unvetted user and could be used to distribute executable scripts (potentially malicious), while the 127.0.0.1 Jupyter API endpoint is local and not a remote download source.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs cloning and using the remote repository https://github.com/hamelsmu/hamelnb.git which provides the script that the skill runs (remote code is fetched and then executed as the skill), so this is a runtime external dependency that executes fetched code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs starting JupyterLab with authentication disabled (empty token/password) and recommends disabling XSRF, which are clear instructions to bypass security mechanisms and thus compromise the host's security posture.