afk-cook

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow consumes GitHub issue bodies and comments via gh issue view without the agent selecting specific items first, exposing the agent to outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The instruction references an npx package installation command pulling from GuillermoMurillo/memo-flow at runtime, which constitutes an unofficial external dependency source.