audit-website

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most URLs are ordinary site/docs pages, but the presence of direct installer endpoints (https://squirrelscan.com/install and https://squirrelscan.com/install.ps1) that would deliver and execute shell/PowerShell scripts makes this set potentially risky unless the squirrelscan.com domain is a verified, trusted vendor; running such installers from untrusted sources is a high-risk vector for malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime path is squirrel audit ... --format llm / squirrel report <audit-id> --format llm, which crawls and fetches outsider-authored website pages from the user-supplied URL and then ingests their extracted text/metadata into the generated LLM-format report (XML/text) that is fed into the agent context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's prerequisite/install commands fetch and execute remote code (curl -fsSL https://squirrelscan.com/install | bash and irm https://squirrelscan.com/install.ps1 | iex), which runs third-party code and is required to install the squirrel CLI.