ctx-agent-history-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill uses ctx search and ctx show session/event to read text from the local ctx indexed history of prior sessions, which can include outsider-authored user intent and transcripts supplied in those sessions; the agent ingests that free text when retrieving matching sessions without needing to pre-select a specific item.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's prerequisites instruct installing the ctx CLI at runtime with "curl -fsSL https://ctx.rs/install | sh", which fetches and directly executes a remote script (https://ctx.rs/install) and is required for the skill to run.