atet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). references/rubber-stamp-field-notes.md uses user-supplied text fields (place/number/keywords/year) that are passed as CLI args to scripts/compose-rubber-stamp-field-note.ts, which renders them into an SVG/PNG via sharp at runtime (so outsider-authored free text directly affects processing/output without selecting a specific item first).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The install instruction runs "bun add --global github:hraness/atet#v3.0.0" (github:hraness/atet#v3.0.0), which fetches and installs remote package code during setup and thus executes external code required by the skill.