nanobanan-ppt

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The URL points to an unvetted GitHub repository from an unknown user and the provided install instructions use npx/remote install commands that would execute code fetched from that repo—making it a suspicious source for potential malware distribution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The stub instructs installing the full skill with "npx skills add op7418/NanoBanana-PPT-Skills" which pulls code from the GitHub repo https://github.com/op7418/NanoBanana-PPT-Skills and would fetch and execute remote code at install/runtime, so this is a runtime external dependency that can execute code.