nuke-on-rails

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Several URLs point to risky runtime delivery or internal metadata endpoints: an unpinned 3rd‑party JS CDN (runtime supply-chain risk), an arbitrary user GitHub repo (untrusted source), and cloud metadata endpoints (SSRF / credential-exfiltration target) — these are plausible malware/supply-chain/credential‑exfiltration vectors.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md Step 1/2/3 ingests machine-readable JSON output produced by running scanners (rubycritic/brakeman/bundler-audit/ruby-audit) over the target app’s files, which are outsider-authored repo content, and that JSON is then read by the LLM for triage/reporting.