backend-contract-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests outsider-authored free text in the form of Pact files/interaction content fetched from a Pact broker (including consumer descriptions, requests, and responses) and then uses it during provider verification (e.g., pact-provider-verifier --pact-urls ./pacts / “Fetch pacts for OrderApi from broker”).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes Pact broker and webhook URLs used in CI/verifier commands that are fetched at runtime and whose fetched pact files/control messages (e.g., https://pact-broker.example.com, https://company.pactflow.io, https://your-broker.pactflow.io, https://broker.example.com and the webhook target https://api.github.com/repos/company/backend/dispatches) directly influence verification/test behavior, so they are runtime external dependencies controlling the agent's actions.