discord-harvest

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.85). These links include third‑party "skills" pages on skills.sh that host/downstream tools for automating Discord scraping (one explicitly mentions auto‑extracting Discord tokens), which — combined with npx/install-style workflows and unknown maintainers — creates a high risk of credential theft or delivery of malicious scripts even though there are no direct .exe links; the discord.com URL itself is legitimate but is used by these tools for potentially abusive browser automation.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly fetches and ingests user-generated Discord content (server messages via the Bot API in "Path A" and DM DOM extraction via browser in "Path B" as described in SKILL.md and references/code-examples.md), and the agent parses message text, embed titles, filenames and links to build a staging manifest and decide which assets to download or record—so untrusted third-party content is read and can materially influence download/processing decisions despite built-in sanitization checks.