cite-sources

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a direct raw GitHub download of a .skill file from a personal/unknown repository (intended for upload/installation), which can embed behavior or code and therefore might be used to distribute malicious configurations or scripts.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md describes an internal “cite-sources” workflow focused on validating and citing externally retrieved information via tools (e.g., WebFetch), but it does not specify any runtime ingestion of outsider-authored free text from an inbox/feed/ticket/community source without first selecting specific items; it only mandates citation tracking for content retrieved for the current task.