qa

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These two URLs point to release/workflow artifacts hosted under an unfamiliar GitHub username (time-attack), which matches a high-risk pattern for distributing runtime artifacts that could contain malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In references/legacy/browse.md the required runtime can read untrusted page text/HTML/accessibility/console output from arbitrary user-selected goto <url> targets (and then uses that extracted content during subsequent steps), making outsider-authored free text injection possible via the page content.