adspy-analytics-intelligence

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (critical risk: 1.00). The installation instructions include a PowerShell download-and-execute command pointing to an untrusted repository (dustfinderfactory).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill involves tracking and analyzing sponsored advertisements and competitor ad campaigns across social networks, which ingest external ad copy and content authored by competitors.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes installation instructions executing an arbitrary remote PowerShell script from GitHub via irm ... | iex, representing a weak/unknown operational dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill prompt instructs users to execute an untrusted PowerShell script from an external URL during installation, which is a common pattern for executing arbitrary payloads and compromising system security.