agents-sdk

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). All listed URLs are official documentation or standards sites except https://my-worker.workers.dev, which is a user-controlled Cloudflare Workers subdomain that can host arbitrary content and thus could be used to distribute malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md mandates fetching public web documentation at runtime (e.g., https://github.com/cloudflare/agents/.../docs/getting-started.md), which is outsider-authored free text that could be ingested into the agent/LLM context during retrieval.