jobs-evaluate

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These are raw GitHub links to a .sh and .ps1 installer that the skill instructs users to pipe directly into a shell/PowerShell (curl ... | bash and irm ... | iex), a high-risk pattern for distributing malware from unverified sources.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests third-party-authored offer title/description/company from a cached offer retrieved via sjctl offer show <offerKey> --json (and explicitly treats those fields as untrusted free text to be graded).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill, when sjctl is not present, fetches and executes remote install scripts at runtime via curl|bash and irm|iex (https://raw.githubusercontent.com/solid-company/solid-jobs-skills/v0.6.0/scripts/install-sjctl.sh and https://raw.githubusercontent.com/solid-company/solid-jobs-skills/v0.6.0/scripts/install-sjctl.ps1), which downloads external code that is executed and is required for the skill to run.