testing-handbook

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The list includes a direct git clone of a third‑party personal GitHub repository (https://github.com/woohyun212/mitrize.git) that the skill instructs you to pull and run scripts from, which is a higher-risk distribution vector; the other links point to an official GitHub releases page and reputable sites.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runs a runtime git clone of https://github.com/woohyun212/mitrize.git and immediately executes a script from that checkout with python3, so fetched external content is executed during skill runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs bypassing a security mechanism (disable ASLR via echo 0 > /proc/sys/kernel/randomize_va_space) and includes system-level install commands that modify machine state, which can compromise the host if executed.