swiftui-claude-skills

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.75). This is a GitHub repo from an unfamiliar/low‑reputation account and the suggested install uses npx (which can execute arbitrary remote code), so it’s a potentially suspicious source for distributed executables or install scripts.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The install step uses "npx skills add 199-biotechnologies/swiftui-claude-skills" which fetches and executes remote package code (upstream: https://github.com/199-biotechnologies/swiftui-claude-skills), so the skill runtime/install retrieves external code that could control prompts or execute code.