perfetto-sql

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's mandatory Step 0 instructs the agent to download and execute a wrapper script from the public URL https://get.perfetto.dev/trace_processor, which is an external, public web resource that the agent must fetch and run to execute queries and thus can materially influence tool behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's Execution Protocol explicitly instructs downloading and making executable a runtime wrapper from https://get.perfetto.dev/trace_processor (curl -LO ... && chmod +x ./trace_processor), which fetches and runs remote code and is required for query execution.