omc-setup

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a GitHub repository (not an official vendor site) from a personal/unknown account and the setup instructs running shell scripts/downloading files that could execute arbitrary code, so while GitHub is a common distribution channel it represents a moderate-to-high risk unless you verify the repo contents and author.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly downloads/installs a public CLAUDE.md (fallback to https://raw.githubusercontent.com/Yeachan-Heo/oh-my-claudecode/main/docs/CLAUDE.md in phases/01-install-claude-md.md) and later reads/parses that CLAUDE.md (phase 04 extracts OMC_VERSION and the doc is noted to include context-persistence tags), so untrusted public content can be ingested and can materially change behavior.