supsub-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). This is a raw GitHub-hosted install.sh (intended to be fetched and executed) from a third‑party repo — direct .sh downloads / curl|bash from an unverified GitHub user are a high-risk vector for malware delivery.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在 supsub-search 的运行路径中，用户提供的自由文本/关键词会被传入 supsub search <keyword> 并用于全站检索（默认 --type ALL 同时返回源与文章正文结果），从而使后端返回的文章摘要/内容等文本被下游 LLM 读取与生成响应。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The prerequisites include a direct install command that fetches and pipes a remote shell script to bash — curl -fsSL https://raw.githubusercontent.com/SupSub-AI/supsub-cli/master/scripts/install.sh | bash — which executes remote code required for the skill.