webtoon-vault-manga-downloader

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (critical risk: 1.00). The skill documentation references downloading an archive from a GitHub Pages site (bunatechnologybackup.github.io), which is a common indicator of malicious software delivery disguised as a tool installation.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill documents a manga downloading tool that fetches web pages from external hosting platforms specified by the user.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). An operational dependency on an arbitrary GitHub Pages distribution site and an unverified GitHub repository (bunatechnologybackup.github.io/manga-pull-cli and github.com/BunaTechnologyBackUP/manga-pull-cli.git) is used for setup and installation instructions, presenting a weak/unknown publisher provenance tier.