generate-openenv-env

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This set includes a direct link to a remote install shell script (https://astral.sh/uv/install.sh) which is fetched/executed in the Dockerfile — a high-risk pattern for distributing malicious code; other URLs are to well-known repos/docs and are not flagged.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow includes “Search upstream docs/repo for the target library” (SKILL.md:22-23), which at runtime can fetch and ingest outsider-authored free text from external repositories/pages into the agent’s LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Dockerfile in the environment template fetches and pipes the remote installer https://astral.sh/uv/install.sh to sh during image build (assets/openenv_env_template/server/Dockerfile:36), which executes remote code as part of the required build/validation workflow.