drupal-project-description

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow uses a runtime curl to fetch the live Drupal.org project page (outsider-authored public web content) and reads the rendered description region to preserve/edit, so that fetched prose can be fed into the agent’s LLM context for editing.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly tells the agent to run a curl at runtime to fetch a live project page ("https://www.drupal.org/project/") and use that fetched HTML to guide edits, so remote content directly controls the agent's output.