superset

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The URL https://superset.sh/cli/install.sh is a direct shell-install script on a non-obvious/unverified domain and is suggested to be run via curl | sh, which is a high-risk distribution pattern for malware; the IETF RFC link is benign documentation.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Superset CLI workflow reads free text from runtime-managed session snapshots via superset terminals read --workspace <id> --terminal <id> and sends arbitrary text with superset terminals send --workspace <id> --terminal <id> --text "...", meaning outsider-authored text can be injected through terminal/session content into the agent flow.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The README directs users to run "curl -fsSL https://superset.sh/cli/install.sh | sh", which fetches and executes remote shell code at install/runtime, creating a high-confidence remote code execution dependency (https://superset.sh/cli/install.sh).