docyrus-create-app

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md describes a runtime flow where docyrus apps create --local-development / docyrus apps clone clones a repo (including “remix a template” from an existing app), meaning the agent will ingest outsider-authored repository code/text into the LLM context via the cloned content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill clones a provisioned remote git repository (the git_repo remote URL populated after create) during --local-development / apps clone and then runs package installation/start (pnpm install && pnpm run dev), so it fetches and executes remote code from the external repo (git_repo).