lorekeep

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches external web pages via lorekeep get based on URL arguments, which ingests outsider-authored web content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The execution wrapper bin/lorekeep invokes uvx with an explicit remote Git repository locator (git+https://github.com/galkin/skills@493ab9f042d39edf712f1056fc8d4027374c6609#subdirectory=lorekeep) to download, build, and execute the lorekeep package and its runtime dependencies at startup, establishing a high-tier external dependency.