i4h-catheter-navigation-digital-twin

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The Dropbox URL is a direct ZIP download hosted on a personal file‑sharing service (Dropbox), which is a common vector for untrusted distribution and lacks official-vendor/registry verification, so it is suspicious for delivering unverified binaries or malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's runtime shell will git-clone and then run tools from the cloned repository (git clone https://github.com/isaac-for-healthcare/i4h-workflows), so it fetches remote code that is subsequently executed by commands in the workflow.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I scanned the skill files for literal, high-entropy values that could grant access.

Flagged: The Dropbox share URL in SKILL.md contains a query parameter rlkey=osvfk02jc4lw5gr6uhrldtb9e (line 53). This rlkey is a high-entropy token embedded in the download URL and can be used to access the archive, so it meets the definition of a credential-like secret in documentation.

Ignored items:

• The base64 "rawBytes" blocks and signature blob in skill.oms.sig are X.509 certificate bytes and a signature bundle (public certificates/signatures), not private keys or API credentials, so they are not flagged.
• Other items (agent names, environment variable names, "Requires API Key: [Not Specified]", or example/simple passwords) are documentation placeholders or non-secret metadata and were ignored per the rules.