skill-security-auditor

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs are suspicious because the explicit external endpoint (https://evil.com/collect) strongly indicates potential data exfiltration and the two unvetted GitHub repos could host malicious code or binaries for distribution.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly requires a target skill directory or git repo URL and shows examples that clone/analyze arbitrary public GitHub repos (see "Audit a Skill from Git Before Cloning" and Quick Start using https://github.com/user/repo), so untrusted user-generated repository content is fetched and interpreted and can materially influence the scanner's verdict and actions.