techdoc-search-and-orchestrate

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These point to an untrusted third-party distribution site (tomevault.io) offering an "install"/relay and a GitHub repo under a numeric/unknown account (727474430) — both are unvetted sources that could be used to distribute executables or malicious files.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md delegates the user’s “prompt” to the context7-researcher subagent via the Task tool, and that subagent is described as using Context7 MCP to retrieve “latest technical documents,” which at runtime is likely to ingest outsider-authored web/document text into the LLM context.