spawn-ori-eval

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The URL https://openrouter.ai/labs/ori/install.sh is a direct shell installer (curl | bash) which is a high-risk distribution pattern for executables; the other links point to well-known documentation or vendor sites and are low risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md step 22 appends the user’s free-text reply into task.txt (the prompt state) and then restarts/continues ori code using --prompt-file, so outsider-authored text is ingested by the LLM at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs running a runtime installer that fetches and executes remote code via the command "curl -fsSL https://openrouter.ai/labs/ori/install.sh | bash", which is a required install path for the ori binary.