go

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs point to a GitHub repository (Soul-Brews-Studio/arra-oracle-skills-cli) used as a source for installing code directly (via bunx and API tag lookups) — installing unpinned code from an unverified/unknown GitHub account can distribute arbitrary/malicious code if the repo or account is malicious or compromised.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path /go list invokes arra-oracle-skills profiles "$1" and then parses the returned free-text line (via grep "Skills:" | sed ... | tr ',' '\n') to build the skill name list without first selecting a specific item, so outsider-entered text can be ingested if it reaches that CLI output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill invokes bunx to fetch and run code from the GitHub package reference "github:Soul-Brews-Studio/arra-oracle-skills-cli#alpha" (and installs via "arra-oracle-skills@github:Soul-Brews-Studio/arra-oracle-skills-cli#$LATEST") and queries https://api.github.com/repos/Soul-Brews-Studio/arra-oracle-skills-cli/tags at runtime, which results in remote code being fetched and executed as part of installs/updates.