Deno

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to manage and fetch dependencies from public URLs (see SKILL.md and imports.md with examples like "https://deno.land/std@0.210.0/..." and mentions of CDNs such as deno.land, esm.sh, unpkg and commands like deno cache/deno run), meaning it ingests untrusted, third‑party code that can materially influence runtime behavior and subsequent tool actions.