chatwoot

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The URL https://chwt.app/install-cli is a direct curl | sh installer hosted on a short/custom domain (chwt.app), which is a high-risk distribution pattern because piping remote shell scripts to sh can deliver malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow uses the Chatwoot CLI to list/show conversations and messages (e.g., chatwoot convs, chatwoot conv, and chatwoot api ... -o json), which can include customer-written free-form message bodies; those message texts would be read by the CLI and ingested into the agent’s LLM context via the command output at runtime (outsider-authored content category: “free-form messages or comments authored by people other than the operating user”).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs running "curl -fsSL https://chwt.app/install-cli | sh", which fetches and immediately executes remote shell code at runtime, so https://chwt.app/install-cli is a runtime-executed dependency.