fp-review

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Suspicious — it's a direct install.sh served from an untrusted/unknown domain (setup.fp.dev) and the skill explicitly instructs using the risky "curl | sh" pattern, which is a common vector for malware distribution.