vhs-demo

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (medium risk: 0.30). The repository's Dockerfile instructs an unattended download-and-execute of an installer from https://bun.sh/install via "curl -fsSL https://bun.sh/install | bash", which fetches and runs remote code without verification.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow renders a repo-committed Charm VHS tape (including user-edited Type "<text>" strings) via Docker (docker run ... <repo>-vhs .github/assets/demo.tape), so outsider-authored free text can be injected through the .tape file before the agent selects which commands to execute.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Dockerfile pulls and runs an external container image (ghcr.io/charmbracelet/vhs) and also executes a remote install script via "curl -fsSL https://bun.sh/install | bash", both of which are fetched at build/run time and execute remote code.