xurl

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The curl command in the skill installs a remote shell script via https://raw.githubusercontent.com/.../install.sh piped to bash, which is a high-risk pattern (running arbitrary remote code); the other URLs are normal API/GitHub links.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow is running the xurl CLI to call X API endpoints (e.g., xurl read/search/timeline/...), and the tool’s JSON stdout will include outsider-authored free text fields like post text/user content, which the agent would ingest into LLM context for downstream reasoning.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes an installation command that fetches and executes remote code via curl -fsSL https://raw.githubusercontent.com/xdevplatform/xurl/main/install.sh | bash and also instructs go install github.com/xdevplatform/xurl@latest, both of which download and run external code required for the skill.