wasted-spend-finder

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a direct git clone of a personal/unknown GitHub repository that the skill instructs you to install into your local skills directory — while GitHub is a legitimate host, cloning and installing code from an unvetted user/repo can introduce malicious scripts, so it is moderately high risk.