github-project-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow ingests outsider-authored GitHub issue/comment text via gh issue view ... --json ... body,comments (e.g., in the “Issue → swarm conversion” and stale-issue analysis paths), which is then passed into npx ruv-swarm github ... --issue-data/--body and becomes LLM-readable context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes npx ruv-swarm and npx claude-flow at runtime (and references their repos https://github.com/ruvnet/ruv-swarm and https://github.com/ruvnet/claude-flow), which fetch and execute remote npm package code required for operation, so this is a runtime external dependency that executes remote code.