se2-dev-plugin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow can download and index plugin source code from the public PluginHub-SE2 registry and arbitrary GitHub repositories (outsider-authored text), then read that C# source text into the local indexer and subsequently into searchable CSV artifacts consumed by the agent (runtime path: actions/search.md → uv run download_plugin_source.py / index_plugin_code.py → generated Data/CodeIndex/*.csv).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). common_posix.sh defines ensure_uv() which, at runtime, fetches and pipes the remote installer script https://astral.sh/uv/install.sh to sh (via curl/wget), thus downloading and executing remote code.