bump-rust-sdk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow includes downloading a public npm tarball at runtime (curl ... registry.npmjs.org/...tgz) and extracting/grepping embedded WASM text to derive the git SHA, which is outsider-authored free text ingested into the LLM context via the fetched page/tarball contents.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). SKILL.md instructs the agent/human to fetch the npm tarball at https://registry.npmjs.org/@bitwarden/sdk-internal/-/sdk-internal-.tgz at runtime and to parse its embedded WASM to derive the exact git SHA to pin, so remote content directly controls the rev-selection decision.