savethetokens

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). All three URLs point to an individual GitHub repository (not a well-known vendor) that contains an npm package with a postinstall script which runs code and copies files into the user's home directory, so installing from these links without review is risky.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). [docs/ADVANCED_AUTOMATION.md + scripts/memory_store.py: outsider-authored free text can enter via the user-provided --note and later be retrieved by memory_store.py search --for-prompt (bounded by --max-chars), making it LLM-readable at runtime.]