harness-migration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow fetches and clones code from a public GitHub repository (https://github.com/FairladyZ625/harness-anything.git), but does not monitor or consume outsider-submitted free text or external communication feeds.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs cloning an external GitHub repository (https://github.com/FairladyZ625/harness-anything.git) during setup/runtime and executing its code directly, which constitutes a third-party operational dependency under an individual-owned repository provenance.