typescript-sdk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SDK explicitly connects to public Nostr relays (e.g., ApplesauceRelayPool with wss:// relays) and describes dynamic relay resolution via relay hints and CEP-17 discovery (kind 10002) so the agent will subscribe to and consume untrusted, user-generated events/metadata that can influence relay selection and event-driven behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly connects at runtime to WebSocket relays such as wss://relay.contextvm.org and wss://cvm.otherstuff.ai (via ApplesauceRelayPool) and the SDK exposes PROMPTS_LIST_KIND / "prompts/list" announcement semantics, meaning remote relay-hosted announcements fetched at runtime could directly control prompts/instructions.