verified-email

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These links point to a GitHub repo/Actions artifacts (used to distribute an app-debug.apk) and a third‑party App Engine demo URL — downloading APKs/artifacts from GitHub Actions or non-official appspot projects is a potential malware distribution vector and not an official vendor download page.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path credentialManager.getCredential(..., request) consumes the returned DigitalCredential.credentialJson (including responseJsonString) and then client-side code parses it with SdJwtParser.parse(rawSdJwt) / JSONObject(responseJsonString), meaning outsider-controlled credential response text can be ingested.