progen

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill instructs users to download and install a binary (including using sudo to move it into PATH) and explicitly advises bypassing macOS Gatekeeper quarantine, which weakens a security boundary and is suspicious without clear malicious intent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill downloads and executes the progen binary at runtime from GitHub (e.g. "https://github.com/sivaprasadreddy/progen/releases/latest/download/progen__.tar.gz" and/or via "go install github.com/sivaprasadreddy/progen@latest"), which fetches remote executable code the skill relies on.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs installing a downloaded binary into a system location using sudo (sudo mv /usr/local/bin/) and suggests bypassing macOS Gatekeeper with xattr -d, which are actions that request elevated privileges and bypass security mechanisms on the host.