hasdata-cli

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The list includes a direct raw GitHub shell installer (https://raw.githubusercontent.com/HasData/hasdata-cli/main/install.sh), which is a direct executable script and a common malware distribution vector unless you verify the repo and inspect the script; the other URLs are mainstream sites or example/test domains and are not direct executable download links.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). High: the web-scraping subcommand ingests arbitrary outsider-authored page content (via --url and --output-format markdown/text/html/json), which becomes readable LLM context through fields like .markdown/.text/.html that the agent would pass into its prompts.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's prerequisites explicitly instruct downloading and running a remote installer script at https://raw.githubusercontent.com/HasData/hasdata-cli/main/install.sh (download then sh install.sh), which fetches and executes remote code and is a required dependency for the CLI.