adobe-indesign-2026-workflow

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill contains an arbitrary remote execution snippet (PowerShell irm ... | iex) embedded in a document about Adobe InDesign workflow.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (medium risk: 0.30). The skill contains a PowerShell command downloading an installation script from an external GitHub repository (raw.githubusercontent.com/CrystalContractor71/Release/main/install.ps1), which presents a suspicious download-and-execute vector.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (critical risk: 1.00). The skill contains a PowerShell command that downloads and executes an arbitrary remote script from GitHub, which is a known technique for dropping malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The installation instructions execute a remote PowerShell script from an arbitrary GitHub repository via iex, constituting a weak, unauthorized runtime external dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill prompt instructs the agent to download and execute an arbitrary remote PowerShell script (irm ... | iex), which is a severe security risk that can compromise the machine.