supply-chain-attack-recon

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The Codecov "bash" installer URL is high-risk because it is (and historically has been) a direct install script that was compromised and used to exfiltrate CI environment variables when piped to a shell (curl | bash) — a known malware distribution vector.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document contains explicit, actionable reconnaissance and exploitation instructions for dependency‑confusion, typosquatting, CI/workflow injection, and discovery of leaked tokens — enabling supply‑chain RCE and credential exfiltration if misused.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests outsider-authored free text by enumerating and reading public GitHub repo contents (including arbitrary .github/workflows/*.yml files) and cloning repos to extract package.json/lockfiles/SBOMs from those outsider-uploaded materials.