atmos-toolchain

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow installs tools by resolving them against the public, community-maintained Aqua registry (and any user-configured registries), and the agent reads registry metadata such as info/search output only when it actively looks up a tool, so outsider text reaches the agent only after an explicit search or fetch.