github-repo-init

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The set includes an explicit instruction to fetch-and-execute a remote .sh (source <(curl ...)) from an untrusted domain plus other unknown-hosted resources (unknown GitHub account and a custom .dev site), so while GitHub itself is lower-risk the direct-download-and-run of a shell script and unknown external domains make this a high-risk distribution vector without manual code review.