cluster-agent-swarm-hardened

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's GitOps agent (Flow) explicitly reads and syncs Git repositories and external manifests (e.g., "Deploy via GitOps (argocd app sync...)", "Git repository management", and installation/links to GitHub in SKILL.md), meaning it ingests untrusted/user-generated third-party content (public Git repos) that can materially influence agent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill documentation includes runtime installation commands (e.g., "npx skills add https://github.com/kcns008/cluster-agent-swarm-skills") which fetch remote skill code from GitHub that would define agent prompts/behavior and thus directly control the agent when installed, so the GitHub URL is a risky runtime dependency: https://github.com/kcns008/cluster-agent-swarm-skills