soia-meta-publish-market

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The list includes a direct shell installer (curl | bash) and a direct npm .tgz URL served from a CDN—both are high-risk distribution patterns because they deliver runnable code outside trusted package registries and are commonly abused to distribute malware.