windows-kernel-security

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow instructs the agent to fetch repository README files, source code archives, and descriptions from GitHub (raw.githubusercontent.com), which are authored by third-party repository owners.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to fetch instructions and repository content from https://raw.githubusercontent.com/gmh5225/awesome-game-security/... at runtime to govern its behavior and retrieve source archives, constituting an unofficial operational dependency.