soia-env-ai-cli-upgrade

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs include direct installer endpoints (shell scripts or curl|bash install pages) that would fetch and execute remote code outside of vetted package managers, so they present a supply-chain / remote-execution risk unless you fully trust and verify the vendor and script contents.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The script's install_agy() function downloads and then executes a remote installer at runtime using the URL https://antigravity.google/cli/install.sh (curl -> bash), which fetches and runs remote code.