qa-e2e-tests-reporting

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). One URL is a direct download of an executable Java archive (testomatio.jar) which is higher-risk to fetch-and-run even though other links are documentation or official cloud consoles.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains a runtime curl command that downloads a JAR from https://github.com/testomatio/java-check-tests/releases/latest/download/testomatio.jar and then executes it with java -jar, which fetches and runs remote code.