jfrog-package-safety-and-download

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests user-provided package identifiers (type/name/version) and then queries JFrog Public Catalog and Stored Packages via OneModel GraphQL using publicPackages.getPackage/searchPackages and storedPackages.searchPackages/getPackage, which are influenced by that free text.