deveco-native-flow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). 运行时会读取并把“用户需求描述/用户在会话中的自由文本”写入主会话上下文（Step 1 需求创建、Step 2/3/4 的需求重述与 plan/coding 生成均基于该自由文本），该自由文本属于非操作用户以外的内容注入源。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill configuration invokes "npx -y @deveco-codegenie/mcp" (in mcpServers.mcp_deveco), which at runtime fetches and executes remote code from the npm registry as a required MCP dependency, so this is a runtime external dependency that executes remote code.