alloy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly shows importing remote content via import.git (e.g., https://github.com/grafana/alloy-modules) and import.http (e.g., https://config-server/alloy/shared.alloy), which fetches and incorporates public third‑party configuration that the agent would read/interpret and which can materially change runtime behavior.