lemur-strategy

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These links point to a third‑party GitHub repository and its raw files plus the project's domain; the install instructions explicitly curl raw scripts and run them (a risky pattern), and the GitHub org is not a widely known vendor—so while not obviously malicious, it is a suspicious distribution vector that could easily deliver malware if the repo is compromised or untrusted.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The README's install step uses curl to fetch executable skill code from https://raw.githubusercontent.com/Senpi-ai/senpi-skills/main/lemur/$f and then instructs running the downloaded Python producer (nohup python3 ...), which is a remote code fetch that will be executed as part of setup and is therefore a runtime/execution risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a trading strategy for executing market positions on the Hyperliquid XYZ venue: it describes auto-discovery of tradable instruments, entry/exit DSL phases, leverage caps, trade scoring and gating, risk guardrails (max_entries_per_day, slots, cooldowns, drawdown_halt), and references marketplace API calls (market_list_instruments, market_get_asset_data, leaderboard_get_markets). It is specifically designed to place and manage market orders/perpetual positions (buy/sell, leverage, position lifecycle) on a financial exchange, which constitutes direct financial execution authority.