bid-proposal-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). 该技能在运行时会解析用户上传的 RFP/附件（PDF/Word 等）并把其可读文本作为 OpenCode 指令/上下文的一部分用于生成投标内容；若这些上传材料包含“非操作用户/非其组织作者”的外部文档正文，则属于外部来源的自由文本进入 LLM 上下文（例如：RFP/附件由客户或第三方撰写）。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill makes runtime HTTP calls to the external OpenCode bridge (e.g., http://opencode-bridge:8000 via the curl upload and POST /task endpoints) which is a required runtime dependency that executes OpenCode tasks and therefore directly controls instruction execution.