openghost-skill

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Yes — the list contains multiple attacker-controlled/typosquatted domains (e.g., evil.example, attacker.example, host@127.0.0.1 forms), open-redirect/SSRF payloads, cloud metadata endpoints and obfuscated local-IP variants that are common indicators and enablers for malware delivery, token theft, or internal access, so the sources are suspicious overall.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's launcher will pull and run the remote Docker image ghcr.io/vaibhavsing/openghost-sandbox:latest during openghost sandbox start, which fetches and executes external container code that the skill relies on at runtime (ghcr.io/vaibhavsing/openghost-sandbox:latest).