geekmagic-smalltv-ultra

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most URLs are benign (official GitHub repos and docs) but several entries point to unauthenticated, local device endpoints (OTA /update and upload /doUpload and /set APIs) which can be abused to install arbitrary firmware or modify the device without authentication, so those device endpoints are security risks on untrusted networks.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The content documents multiple deliberate, unauthenticated device features (exposed credentials via /config.json, unrestricted OTA /update firmware uploads, writable file APIs, and destructive endpoints) that together enable clear remote compromise, credential exposure, and persistent remote code execution risks.