spotify-mp3-cli-downloader

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading an executable tool from a personal GitHub Pages site (guess-eng.github.io) without verifiable official publisher provenance, presenting a weak operational dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill prompt instructs the agent to move a downloaded binary into a system directory using sudo privileges (sudo mv streamscribe /usr/local/bin/), which is a security concern regarding machine state modification.