deps-runner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Stage 01 (scan-context) inline runtime uses the gh pr list results for the target repo (outsider-authored PR titles/authors/URLs) to build the candidate PR list that downstream stages consume.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill issues runtime curl POSTs to "${PYLOT_API}/missions/${PYLOT_JOB_ID}/workers" and a stop endpoint ("${PYLOT_API}/missions/${PYLOT_JOB_ID}/workers/${WID}/stop") to spawn and control remote workers (executing remote code) and the procedure depends on those workers for repo-stage execution.