solana

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These URLs point to a remote install script and a direct platform-tools archive (download-and-run / direct binary archive from a release endpoint) which are high-risk distribution vectors for malware if the source is untrusted or tampered with.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains explicit runtime commands that fetch and execute remote code — e.g., curl https://release.anza.xyz/stable/install which is saved and then run with sh, a git clone of https://github.com/blueshift-gg/quasar used to build/install the CLI, plus fetching platform-tools from https://github.com/anza-xyz/platform-tools/releases/download/${PT_VERSION}/platform-tools-linux-x86_64.tar.bz2 and a git Cargo dependency https://github.com/blueshift-gg/quasar-svm, all of which pull and run remote code during setup.