zurl

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs include short/redirector domains (short.example.com, s.example.com and their short URLs) and an internal API host (http://192.168.1.100:3088) used by the skill; URL shorteners/opaque redirects are commonly used to hide malicious download destinations, so these entries should be treated as potentially suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path in scripts/zurl_api.py ingests free text from the user-supplied long_url/url/keyword/title/description arguments and sends them to the Zurl API via _request() (e.g., shorten() and get_metadata()), so an outsider can submit arbitrary text that this workflow consumes without selecting a specific pre-existing item first.