oci

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Prerequisites and references/INSTALL.md explicitly instruct running a remote installer via curl from raw.githubusercontent.com (bash -c "$(curl -L https://raw.githubusercontent.com/oracle/oci-cli/master/scripts/install/install.sh)"), meaning the agent/workflow is expected to fetch and execute untrusted third‑party code that can materially change behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill's runtime prerequisites explicitly instruct fetching and executing remote installer scripts for the required OCI CLI (e.g., bash -c "$(curl -L https://raw.githubusercontent.com/oracle/oci-cli/master/scripts/install/install.sh)", curl -sL https://raw.githubusercontent.com/oracle/oci-cli/master/scripts/install/install_oci_cli_ubuntu.sh | bash, and the PowerShell https://raw.githubusercontent.com/oracle/oci-cli/master/scripts/install/install.ps1), which executes remote code and is relied on as a required dependency.