inversion-thinking-skill

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Contains a likely typosquatted domain (https://www.investop.com instead of investopedia) and two GitHub repositories from an individual account (peterfei) referenced as installable skills — both are higher-risk distribution vectors because personal GitHub packages/npx installs can deliver executable code and unknown accounts/repos may be unvetted.