cf-proxy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow downloads worker code from GitHub repository cmliu/edgetunnel, which is external source code ingestion.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references fetching code from cmliu/edgetunnel via GitHub and installing itself from LewisLiu007/cf-proxy, but these represent third-party community repositories lacking strong official first-party vendor provenance, making it a common/reputable unofficial operational dependency (medium tier).