gm-skill-manager

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most URLs are GitHub repositories or official documentation (low risk), but several entries are malformed/template placeholders ({value}, {remote}, {ssh.group}) and two include embedded credentials in the URL (user:secret@...?...token=...), which are suspicious/unsafe (credentials leakage, obfuscated/templated links, and potential for redirect/hidden targets) and could be abused to distribute malicious executables—treat this set as moderately high risk until the templated/malicious entries are resolved and credentialed links are removed.