claude-wireframe-skill

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a third‑party GitHub repository from an individual account that instructs installing code (via npx/skills add) which can fetch and execute arbitrary code and is not a verified/official vendor — so it should be treated as potentially unsafe unless you verify the source and inspect the code.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's install step directs running "npx skills add Magdoub/claude-wireframe-skill", which fetches and installs code from the external repository https://github.com/Magdoub/claude-wireframe-skill at runtime, meaning remote code/content would be retrieved and executed and could control prompts or behavior.