swift-reference-repos

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The "Agent Workflow: Cloning and Using References" section explicitly instructs the agent to git clone and study public GitHub repos (e.g., https://github.com/AudioKit/Flow.git, https://github.com/SwiftUIX/SwiftUIX.git, https://github.com/ghostty-org/ghostty.git), meaning the agent will fetch and read untrusted, user-generated third‑party content that can influence its decisions and tool use.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs agents at runtime to git clone and build remote repositories (for example, https://github.com/ghostty-org/ghostty.git via "git clone" and subsequent "zig build" steps), which fetches remote code that can be compiled and executed locally, so this is a runtime external dependency that can execute code.