j-space

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). One URL (https://astral.sh/uv/install.sh) is a direct shell installer (used with curl | sh) which is a high-risk pattern for remote code execution; the Anthropics research page is documentation and not suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider-authored free text can enter the LLM context via the hypnotize --script flag: scripts/jspace.py renders that free text into induction.md and (optionally) into an always-on .cursor/rules/jspace-<name>.mdc, which the agent will read as prompt-side context; the --script content is not constrained to be user-authored.