se-dev-plugin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow invokes helper scripts like download_pluginhub.py, download_magnetarhub.py, and download_plugin_source.py that fetch external repositories and clone untrusted plugin source code from GitHub into local directories, allowing outsider-authored free text to enter the processing pipeline.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes download_pluginhub.py and download_magnetarhub.py to clone arbitrary GitHub repositories from remote URLs, presenting an official-looking toolset backed by unauthenticated external code fetching under weak provenance, thus hitting the high-severity threshold.