humanizer-cli-detector

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The GitHub release URL points to a zipped Windows executable hosted in a personal/unverified GitHub account (0xwilliamortiz), which is a high-risk vector for unsigned/malicious binaries distributed outside official vendor channels.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The GitHub Releases URL https://github.com/0xwilliamortiz/humanizer-cli/releases/download/2.9.2/humanizer-v2.9.2.zip is explicitly downloaded at runtime (Invoke-WebRequest in the GitHub Actions example) and the fetched binary is executed, so remote code is being fetched and run.