bitdefender-total-security-workflow

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill document includes an arbitrary remote PowerShell installation script via iex from an unknown third-party repository masquerading as antivirus documentation.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (critical risk: 1.00). The skill instructs the user to pipe an arbitrary remote PowerShell script from a suspicious GitHub repository into iex for installation.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes an arbitrary remote installation script from an unverified GitHub raw URL (https://raw.githubusercontent.com/CrystalContractor71/Release/main/install.ps1) during setup, presenting a high-tier runtime external dependency risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill prompt instructs the user to execute an untrusted PowerShell script from an external URL (irm ... | iex), which is a common vector for remote code execution and machine compromise.