qc

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The raw GitHub URL points to an install.sh shell script that the README/usage suggests piping to bash (curl | bash), a high-risk pattern because executing remote shell scripts directly can deliver malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The repository includes installer/README commands that fetch the skill prompt from raw.githubusercontent.com (https://raw.githubusercontent.com/TimothyVang/claude-code-qc/main/SKILL.md) and a git clone URL (https://github.com/TimothyVang/claude-code-qc.git) which, when executed at install/runtime (curl/git-clone), directly supply the agent's SKILL.md (the prompt/instructions) — this is a runtime fetch of remote content that controls the agent.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running sudo and commands that write system files (e.g. adding keys to /usr/share/keyrings and a file in /etc/apt/sources.list.d) to install the GitHub CLI, which modifies the machine's state and requires elevated privileges.