configure-ecc

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is an arbitrary GitHub repository from an individual account (not a verified/official vendor) that the skill instructs you to clone and copy entire directories (including scripts), so cloning it could introduce untrusted code or malware into your system.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill performs a runtime "git clone https://github.com/affaan-m/everything-claude-code.git" to fetch SKILL.md and other skill/rule files which are then installed (and thus can directly control agent prompts/instructions), and the installer relies on that external repo as a required dependency.