devops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill includes explicit browser-rendering scraper and crawler code (references/browser-rendering.md and references/cloudflare-workers-advanced.md) that navigates arbitrary URLs (e.g., page.goto('https://news.ycombinator.com') and page.goto(message.body.url) or a URL query parameter) and feeds the retrieved HTML into an AI extractor, which clearly ingests untrusted, user-generated third‑party web content and can influence subsequent actions (queuing links, AI-driven extraction and decisions).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes installation commands that fetch and execute remote installer scripts at runtime—e.g., curl https://sdk.cloud.google.com | bash and curl -O https://dl.google.com/dl/cloudsdk/... followed by ./google-cloud-sdk/install.sh—which run remote code and are presented as required dependencies for the gcloud CLI.