dependency-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill audits local dependencies or clones a GitHub repository to run vulnerability scanners (pip-audit, npm audit, cargo audit, trivy), ingesting dependency metadata, descriptions, and advisory text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The script installation command uses an unauthenticated HTTP download piping an external shell script from GitHub (https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh), representing a weak, third-party runtime external dependency.