tiez-clipboard-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s runtime path emits clipboard text from the user’s system clipboard (clipboard/monitor.rs → emit_all("clipboard-changed", content)), and that clipboard content is not authored by the operating user (it can originate from any external app), so it can become free text ingested into the agent/LLM context via the frontend event.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The installation instructions include a direct remote-execution command "curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh", which fetches and immediately executes remote code as a required setup step.