video-downloader

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The only notable risk is the GitHub repository URL (https://github.com/jiji262/douyin-downloader.git) used as an install/source for douyin-downloader — pulling and running code from an unvetted/third-party GitHub account can deliver arbitrary code and is therefore high-risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). skill.md 指定 wx_channels_download 通过本地 API /api/channels/parse_sph?url=... 在运行时读取并处理来自分享链接解析结果的 description 等字段（这些字段是与用户提供的 https://weixin.qq.com/sph/... 相关联的外部文本）。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's install command clones and later runs code from the remote git repository https://github.com/jiji262/douyin-downloader.git at runtime (git clone then running the repo's run.py/uv commands), meaning fetched remote code is executed.