nix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md includes explicit runtime commands that fetch and process arbitrary web content (e.g., "Prefetching Hashes" shows nix-prefetch-url --unpack https://example.com/source.tar.gz and "Shebang Scripts" shows curl -s https://example.com), so the agent could ingest untrusted third‑party data that might materially influence builds or subsequent actions.