hunter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow uses ClawLink to run Hunter actions that fetch and return Hunter-derived enrichment/search results (outsider-authored free text) into the agent’s runtime context via the CLI output/HTTP responses.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to run npx @useclawlink/cli (see https://www.npmjs.com/package/@useclawlink/cli), which at runtime fetches and executes remote npm package code that the agent relies on to perform and control actions, so this is an external runtime dependency that executes remote code.