landing-page-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow uses the web-search tool (Tavily) to execute a user-supplied query and ingest retrieved search content at runtime via infsh app run tavily/search-assistant --input { "query": ... }.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill directs runtime execution of a remote install script via "curl -fsSL https://cli.inference.sh | sh" which fetches and executes remote code (https://cli.inference.sh).