go-workspace-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow loads a user-provided workspace config (resolve_config_path / load_repos) that contains arbitrary clone URLs and then performs network fetches (command_sync runs git clone/git pull) and executes third-party code via go build/go test (command_go), so it clearly ingests and acts on untrusted, user-generated remote repository content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill loads repo clone URLs from the workspace config (e.g., https://github.com/example/example-cli.git and git@github.com:example/homebrew-tap.git) and at runtime uses them in git clone and subsequent go build/test commands, which fetches and causes execution/building of remote code.