detecting-serverless-function-injection

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Both URLs are hosted on an attacker-controlled domain — one is a direct shell script download (http://attacker.com/shell.sh) and the other is an exfiltration endpoint (http://attacker.com/exfil?data=$) — indicating a high likelihood of malicious code delivery and data exfiltration.