argo-cd

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow consumes outsider-authored YAML/manifest content from Git when using the ApplicationSet git generator (repo directories under configured repoURL are fetched at runtime to generate Applications), which can include attacker-controlled free text from a user-managed Git repository.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime fetch-and-execute references such as kubectl apply -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml and multiple Application repoURL fields (e.g. https://github.com/myorg/payment-service.git, https://github.com/myorg/gitops-config.git) which will be fetched at runtime and directly drive deployments/execution, so these external URLs are required runtime dependencies that execute remote manifests/code.