mobile-app-ui-design

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is an unverified GitHub repository from an individual account (no signs of established trust) whose install instructions use npx/skills-add style commands that would fetch and execute remote code, so it could be used to distribute malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The stub instructs runtime installation via npx (e.g., "npx skills add ceorkm/mobile-app-ui-design ...") which would fetch and run code from the upstream GitHub repository https://github.com/ceorkm/mobile-app-ui-design, so external content is retrieved at runtime and executed as a required dependency.