cds-accessibility

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md requires loading official CDS component documentation via the cds-docs skill (public Coinbase CDS docs / fetched .txt content), which is outsider-authored free text that the agent will ingest into the LLM context at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly requires loading official CDS docs at runtime via the cds-docs skill (https://skills.cbhq.net/skill/frontend/cds-public/cds-docs) and falls back to curling https://cds.coinbase.com/llms/... for .txt docs, which are fetched at runtime and directly control the agent’s review instructions and behavior.