claud3

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is a personal GitHub repository (dtran320/claud3) from an individual account rather than a well-known, widely vetted package — and the install instruction uses npx which will execute remote code, so it represents a moderate-to-high risk for malware distribution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires installing and running an external package via "npx skills add dtran320/claud3" and its upstream points to https://github.com/dtran320/claud3, which means remote code is fetched and executed at install/runtime and is a required dependency.