sql-sentinel

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs point to a third‑party GitHub repository containing executable scripts from an unknown/independent account — cloning or running unreviewed code from such a source is potentially risky and should be audited and pinned to a reviewed commit before execution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs cloning and running code from https://github.com/takeaseatventure/sql-sentinel (git clone https://github.com/takeaseatventure/sql-sentinel.git followed by node scripts/sql-sentinel.js), which fetches and executes remote code at runtime, so the external URL is a runtime dependency that executes code.