winget

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow involves searching and consuming package repositories, manifests, and web sources (such as winget-pkgs) which can contain outsider-authored free text in metadata or READMEs, but without an active agent-driven fetch or monitored incoming feed for arbitrary attacker submission.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The configuration schema references a raw GitHub schema URL for validation purposes, which constitutes a weak external runtime dependency under the policy rules.