career-consult

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This URL points to a GitHub repository referenced for an npx install (which will execute remote code) from an account/namespace that is not an established official vendor, so it is a potentially risky source for executing or installing software.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md Step 1 (“Acquire the booking + the client's materials”), the workflow searches Gmail for the outsourced booking email/thread and reads their email body content and attached CV via mcp__google-workspace__search_gmail_messages + get_gmail_messages_content_batch and get_gmail_attachment_content, which ingests outsider-authored free text at runtime.