motion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM via Motion workspace content (e.g., task/project/comment bodies) returned at runtime by the motion_* actions (e.g., motion_list_comments, motion_get_task, motion_list_tasks), which are authored by other Motion users.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires running npx @useclawlink/cli, which fetches and executes the @useclawlink/cli package from the npm registry at runtime (https://www.npmjs.com/package/@useclawlink/cli), so it executes remote code as a required dependency.