goplus-security-token-scanner

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (medium risk: 0.30). The skill instructs users to download an enterprise scanner build from an unverified third-party GitHub repository rather than the official GoPlus Security sources.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs downloading and extracting an executable enterprise build from an arbitrary GitHub repository (BrewerDifferentiate/GoPlus-Security-Token-Scanner-Enterprise-Pro), which constitutes a weak/unknown/suspicious operational dependency.