test-go-cli

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The URL is a raw GitHub-hosted shell script from the OKX org (a recognizable entity) but it is an executable .sh intended to be run via curl|sh—an inherently risky delivery method that can distribute malware if the repository or account is compromised, so treat it as suspicious.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL's pre-flight step instructs running a remote install script that is fetched and executed (curl -sSL https://raw.githubusercontent.com/okx/onchainos-skills/main/install.sh | sh), which executes remote code and is required to install the onchainos CLI that the skill depends on at runtime.