eks-upgrade-check

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). The required workflow includes “OSS add-on discovery & compatibility verification” where the agent scans cluster workloads and then performs runtime webFetch/remote_web_search on outsider-authored upstream pages (public web content) and ingests that fetched text to generate findings, creating an indirect prompt-injection risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly fetches live upstream compatibility pages at runtime (e.g., via webFetch/remote_web_search) such as https://istio.io/latest/docs/releases/supported-releases/, and uses those pages to determine add-on compatibility and scoring, so these external URLs directly control agent verdicts.