chef-custom-resources

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads vendor/platform data from endoflife.date via endoflife.date/api/$product.json in bin/cookbook-helpers (used by Phase 2b), which ingests free-text/JSON content from an external provider at runtime and could be attacker-controlled.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill instructs deleting and managing system-level artifacts (recipes/attributes, systemd units), directs use of systemd_unit and requires sudo: true for service management which would modify systemctl units and require elevated privileges on the host.