pricewin-flight-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The URLs referencing the mcp.price.win MCP endpoint are suspicious because the provided install.sh automatically registers that untrusted remote server with local agents (modifying configs and enabling remote tools), creating a high-risk vector for malware or remote abuse; the ClawHub and GitHub pages appear to be project hosting/documentation and are lower risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The package and installer deliberately add an external, anonymous MCP server (https://mcp.price.win/mcp) into multiple local agent configurations—modifying files and registering a remote tool endpoint—which can enable remote tool injection, remote code execution or data exfiltration if that server is malicious.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs running install.sh which writes backups and modifies agent configuration files across the machine to register a remote MCP server, thus changing system/user state and altering agent behavior.