ubs

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These are raw GitHub links to executable shell scripts in a personal/unvetted repository and the skill instructs piping curl output to bash and installing an unverified binary — a high-risk pattern for distributing malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill explicitly downloads and runs code from public GitHub URLs (e.g., the curl install lines in SKILL.md/README and the "lazy module download" / "modules fetched from GitHub on first use" statements in AGENTS.md and AGENT docs), so untrusted, user-generated third‑party content is fetched and its scanner outputs/executed modules can directly influence agent decisions like commit gating and fix actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). I flag the raw GitHub URLs (e.g. https://raw.githubusercontent.com/Dicklesworthstone/ultimate_bug_scanner/master/install.sh and https://raw.githubusercontent.com/Dicklesworthstone/ultimate_bug_scanner/master/ubs) because the skill explicitly uses curl ... | bash and lazy-downloads modules from GitHub at runtime, which fetches and executes remote code that the tool relies on.