terranix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s workflow reads and evaluates the user’s repository files (e.g., config.nix / broken-config.nix) at runtime via terranix ... > config.tf.json and/or nix build, which is outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The flake inputs referenced in the skill (e.g., github:terranix/terranix and github:nixos/nixpkgs?ref=nixos-unstable) are fetched and executed at runtime during nix/flake evaluation (nix build / nix flake init), so remote Nix code from those URLs directly controls the generated configuration and is therefore a runtime-executed dependency.