dnspy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow opens a user-selected untrusted .NET sample in dnSpy and the agent reads its decompiled strings, config fields, and decrypted values (SKILL.md Quick Start and Malware Analysis Workflow), which are attacker-authored but only ingested after the user chooses a specific sample.