jobs-create-profile

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These are direct raw GitHub links to shell/PowerShell installer scripts that the skill instructs users to pipe into a shell (curl | bash, irm | iex), a high-risk pattern for distributing malware from an external/unverified source.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill may run installation commands at runtime that fetch and execute remote scripts (curl https://raw.githubusercontent.com/solid-company/solid-jobs-skills/v0.5.0/scripts/install-sjctl.sh | bash and irm https://raw.githubusercontent.com/solid-company/solid-jobs-skills/v0.5.0/scripts/install-sjctl.ps1 | iex), so these URLs download and execute code required for the skill.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The prompt instructs the agent to download and execute a remote installer (curl | bash and irm | iex), which executes arbitrary code on the host and can modify system state or require elevated privileges.