alterlab-dnanexus

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's documentation and required runSpec explicitly allow Internet access and fetching/executing third‑party packages and images (e.g., references/configuration.md shows runSpec.execDepends and "access": {"network": ["*"]"}, references/app-development.md notes "Internet access", and examples demonstrate pip install and docker pull), so it will fetch and run untrusted public content that can materially alter tool behavior.