npm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow involves installing public packages from the npm registry, where an attacker can publish poison in package metadata or README files, but the agent must actively search or fetch specific packages rather than passively ingesting a monitored feed.