afk-pipeline

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Multiple direct installer script URLs (curl|bash targets) plus malformed GitHub ".extraheader" fetch URLs that can be used to inject/expose credentials present a notable risk if executed or reused without verification.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime pipeline ingests outsider-authored free text from GitHub issues—specifically the triggering issue’s body is read into ISSUE_BODY and injected into the Agent Brief/phase prompts (implement and verify) before any item selection is possible.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The Dockerfile contains multiple curl | bash installers that are executed during image build (a runtime step of the pipeline), e.g. https://bun.sh/install, https://claude.ai/install.sh, https://cursor.com/install, https://x.ai/cli/install.sh and the GitHub CLI archive key at https://cli.github.com/packages/githubcli-archive-keyring.gpg, which fetch and execute remote code required by the skill.