alibabacloud-ecs-linux-os-troubleshooting

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow lets outsider-provided natural-language “user description” be used to classify the phenomenon domain (symptom-to-domain routing) before executing further steps, which requires ingesting free text from the user.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes a runtime instruction to download and extract remote code via wget from 'https://github.com/brendangregg/perf-tools/archive/refs/tags/v1.0.tar.gz' (references/utils/tracepoint-perf-tools.md), which fetches and enables executing third-party tooling during investigation.