no-slop

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). All listed links are public documentation and trusted sites except one GitHub URL pointing to a personal/low‑visibility account (woosal1337), which is an atypical source for binaries and matches a high‑risk indicator for potential malware distribution.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Skill no-slop only reads outsider-authored free text when the user-supplied draft content (e.g., README/blog/PR/email text) is provided to the skill for rewriting, and the runtime workflow is a local lint/transform over that input rather than passively monitoring an outsider-controlled feed.