ux-spec

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub URLs are standard and low-risk, but the TomeVault links point to a third-party distribution site (including an "install" page and a claim/relay mechanism) that is not an established vendor and could be used to distribute installers or executables, so these TomeVault URLs are potentially suspicious.