supsub-unread

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). This is a direct raw GitHub-hosted shell install script that the README recommends piping into bash (curl | bash), which is a high-risk pattern because it executes remote code from an unvetted source.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 运行时会先调用 supsub unread -o json 获取未读概览，并在用户选择/关心的源或关注点后调用 supsub sub contents --source-id ... -o json / supsub focus contents --id ... -o json 读取未读内容文本，因此流程会摄入外部（用户可通过其账号订阅/关注的）免费文本内容。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL.md includes a prerequisite that runs a remote script via curl piped to bash (https://raw.githubusercontent.com/SupSub-AI/supsub-cli/master/scripts/install.sh), which fetches and executes remote code at install/runtime and thus directly controls execution.