review

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The list includes a direct GitHub release-download URL hosted under an unfamiliar account (time-attack) and an external site (garryslist.org) that looks like a typosquat/non-official domain — both are plausible malware distribution vectors and should be treated as suspicious until verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In references/artifacts/review/greptile-triage.md, the required workflow fetches and then reads attacker-controlled GitHub PR/issue comment text at runtime via gh api .../pulls/$PR_NUMBER/comments and /issues/$PR_NUMBER/comments, including full body fields used for classification and reply decisions.