electron-docs

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs point to custom/update servers and a Google Docs personal link (placeholders and non-official hosts) that can be used to deliver application updates or binaries outside official channels, which is a common malware distribution vector.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly lists an inAppPurchase API (canMakePayments, getProducts, purchaseProduct) and references in-app purchases (macOS Mac App Store, inAppPurchase module). The presence of a purchaseProduct API is a specific function that initiates financial transactions (purchases), which constitutes direct financial execution capability.