super-autopilote-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill ingests outsider-authored free text from the local issue Markdown files (e.g., docs/issues/<change>/*.md) at runtime when it parses ## Blocked by and passes the issue path/content into subagents for implementation/review/QA; those issue files are not authored by the operating user by definition of “outsider” in this scenario.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill explicitly runs "npx ctx7@latest library <...>" and "npx ctx7@latest docs <...>" at runtime (which downloads and executes the ctx7 package from the npm registry, e.g. https://registry.npmjs.org/ctx7), so it fetches and executes remote code during skill execution and is a required lookup flow controlling behavior.