python-upgrade-package

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Le workflow demande de récupérer du contenu public “WebFetch” sur PyPI/GitHub changelogs (ex. SKILL.md:62-64, references/analyse-paquet.md:18-20), donc du texte libre outsider peut être injecté indirectement via la phase “Changelogs” lue par le subagent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The subagent prompt (references/analyse-paquet.md) instructs the agent at runtime to WebFetch PyPI changelog pages (e.g., https://pypi.org/project// and https://pypi.org/project/{paquet}/), injecting external changelog content into the agent context that directly drives the subagent's analysis and outputs.