skill-manager

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These GitHub links point to a direct release bundle and a releases page from an unspecified/unknown repo (direct downloadable archives from unknown GitHub accounts are commonly used to distribute malware and the SKILL.md even warns against curling/downloading GitHub files).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow (“Always use the search_skills tool” with auto-install) can fetch and install community/global skills from outsider-authored public indexes/ecosystems at runtime, and the installed skill’s README/skill files (including free text) are then read into the agent context by virtue of installation.