devops-weapon

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests outsider-authored repository files (e.g., Dockerfile, .github/workflows/*.yml, docker-compose*.yml) into the agent context during the “inventory the repo / read workflows” runtime path, which are free-form text that attackers can poison for indirect prompt injection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The guide includes a runtime curl|sh install command that would fetch and execute remote code from https://depot.dev/install-cli.sh (guides/07-depot-integration.md:131), which is a direct remote-code execution dependency for local/CI workflows.