review

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The list is mostly official documentation and registry links (low risk), but the GitHub repository (https://github.com/wyattowalsh/agents) is a personal/unknown account which can host unvetted releases or executable assets and thus is a higher-risk download/source compared with the others.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In references/triage-protocol.md, PR-mode triage extracts PR description and issue bodies using gh pr view / gh issue view and passes that free text into the Wave 1 Requirements Validator prompt path, so outsider-authored ticket/PR text can be ingested without selecting a specific item.