woostack-respond

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These URLs are suspicious because several embed secrets (tokens, API keys) in query/fragment parameters or are signed cloud-storage links (S3/GCS) that can host arbitrary files — a common channel for delivering malware or exposing credentials.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). woostack-respond ingests provider query output/envelopes and derived telemetry fields into LLM context during Phase 3/4 investigation, via the real read-only host queries and selected-group detail acquisition, which can include user-supplied payloads (e.g., error messages/stack/log lines) without first selecting a specific outsider-authored item.