claude-doctor

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). nodejs.org is an official, low-risk site, but the raw GitHub shell script URL (and the personal GitHub repo used as the bootstrap source) are suspicious because the code suggests piping a remote .sh into bash from a user-controlled repo — a common malware distribution vector.