skill-creator

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The two GitHub URLs point to a personal/placeholder repository (github.com/yourusername/cli-ai-skills) which is not an official vendor source and the repository (per the files) contains executable scripts and packaging utilities — personal GitHub repos used to distribute executables are a higher-risk download source.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md Phase 1-2, the workflow directly ingests the user’s free-form answers (“What should this skill do?” / triggers / one-sentence description) via an interactive CLI flow and uses them for template substitution, so an outsider can provide arbitrary text through the skill’s own prompt inputs.