vuln-scanner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow requires cloning arbitrary third-party repositories via git clone or gh repo fork from GitHub trending lists or search results, and running static/dynamic analysis on their code and untrusted files.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill downloads an executable scanner binary from https://github.com/google/osv-scanner/releases/latest/download/osv-scanner_linux_amd64 during runtime execution, representing an unverifiable remote binary dependency from a common unofficial/third-party source path.