grok-designer

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Both URLs point to a third‑party GitHub skill that installs a local CLI and to an external API host (zenmux.ai) used by that CLI—an unknown/unvetted repo plus a nonstandard API endpoint is high risk because it can install and run code and exfiltrate data or commands.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The CLI makes runtime API calls to the external provider at https://zenmux.ai/api/v1 (used in scripts/grok-designer and written into config by scripts/install_cli), and the responses from that endpoint directly drive the agent's prompts/output, so this is a required runtime dependency that controls agent behavior.