voxcpm

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The presence of a third-party HF mirror (https://hf-mirror.com) used as an alternate model endpoint is suspicious because it can serve unverified model/artifacts (potentially malicious), while the other URLs point to local services or established GitHub repos and are lower risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The README contains git clone commands that fetch and install remote code which is then executed locally (git clone https://github.com/OpenBMB/VoxCPM.git and git clone https://github.com/vllm-project/vllm-omni.git), meaning the skill runtime can pull and run external repositories.