npm-docs

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs include unknown/private registries and arbitrary tarball/git endpoints (external hosts like example.com and user@hostname git URLs) which are not official/npm-controlled sources and can be used to distribute unverified packages or executables, so they present elevated risk for malware distribution.