filesystem

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The package references non-standard/possibly typo-squatted domains (clawdhub.com and docs.clawd.bot) that differ from the primary clawhub.ai links and could be used to host untrusted installers or redirect users to malicious downloads.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). This filesystem skill’s required runtime workflow ingests outsider-authored text only through files located in the caller’s accessible local workspace/directory (e.g., via filesystem search --content or filesystem list/tree/analyze reading those files), not from a provider-managed outsider queue/feed.