agency-orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The workflows/research.yml tasks (notably the "community" and "implementation" prompts) explicitly instruct agents to fetch and interpret content from open public, user-generated sources like GitHub issues/discussions, Stack Overflow, Reddit, HN, GitHub repos, and npm packages, which will be read and synthesized and can materially influence downstream decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). Flagged because the skill's runtime setup command "npx agency-orchestrator mcp" fetches and executes remote code from the npm registry (e.g. https://registry.npmjs.org/agency-orchestrator), and that fetched package runs the MCP server which directly controls agent prompts and execution as a required dependency.