install-skill

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The 1Password blog link is a reputable informational page, but gist.github.com (user-hosted snippets) and github.com/author/skill-repo.git (an unknown GitHub repo) are external, user-controlled sources commonly used to host single-file executables or staged-install instructions and thus represent a suspicious download vector that requires a security gate and manual review.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workflow explicitly instructs fetching external skills at runtime (e.g., git clone https://github.com/author/skill-repo.git and downloading single-file skills from https://gist.github.com/...) and then running install commands (npm install / pip install), so remote content downloaded during installation can execute code and/or supply SKILL.md prompt instructions that control the agent.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt directs the agent to clone and install external repositories, run package installs and install scripts, and create symlinks across multiple CLI/app directories (modifying the filesystem and executing untrusted code), which directly changes the machine's state and can enable supply-chain or execution attacks.