ida-reverse

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The two http://127.0.0.1 URLs are local loopback endpoints (not external download hosts) but the third URL is a direct GitHub repository used as a pip/git install source — installing code directly from an external GitHub user of unclear reputation can be risky unless you verify the repo (history, stars, code, releases) and inspect the code before running the provided install/start scripts.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). 该 skill 指南和脚本会直接修改宿主机状态：使用 taskkill /F /T 杀进程、复制 System32 文件到临时目录以绕过文件权限、自动 pip 安装并写入 MCP/配置、以及在 IDA 上执行任意 Python 等操作，显著改变系统进程、文件和配置并涉及安全绕过。