underworld-overseer-save-mapper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime LLM-ingests outsider-authored free text only from a user-supplied local Underworld Overseer .json file path via validate_save.py (read_bytes() + json.loads()), which is arbitrary user content rather than trusted first-party sources.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). scripts/setup.sh performs git clone of https://github.com/RobThePCGuy/Underworld-Overseer-Save-Mapper.git at runtime, fetching upstream Python code that the skill then runs (e.g., main.py) and is required for interactive map generation.