otel-instrumentation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill includes runtime installation commands that fetch and execute public GitHub content (e.g., the curl + wget sequence in rules/sdks/dotnet.md and rules/sdks/java.md that query https://api.github.com and download/run release assets like otel-dotnet-auto-install.sh or opentelemetry-javaagent.jar), which clearly ingests untrusted third-party web content that can materially change tool behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime install commands that fetch and execute remote code—e.g., downloading and running the .NET install script from https://github.com/open-telemetry/opentelemetry-dotnet-instrumentation/releases/download/${OTEL_DOTNET_VERSION}/otel-dotnet-auto-install.sh and retrieving the Java agent jar from https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/download/${OTEL_JAVA_VERSION}/opentelemetry-javaagent.jar—so external content is fetched at runtime and executed.