internal-linking

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a personal GitHub repository (unknown individual account) which can host releases or executables outside official vendor channels, so it could be used to distribute malware and should be treated with caution.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The internal-linking runtime workflow ingests outsider-authored free text by fetching and reading public HTML pages (remote discovery via “web/search with site:domain queries” and subsequent “Require source evidence” from source passage/DOM) to generate link insertion contexts.