plugin-update

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches plugin metadata over HTTPS from GitHub (raw.githubusercontent.com and api.github.com) using fetch-latest-versions.sh, which parses external repository content under outsider control.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill executes curl to fetch configuration/version data from https://raw.githubusercontent.com/kochetkov-ma/claude-brewcode/main/... and runs installation commands from https://github.com/kochetkov-ma/claude-brewcode, constituting an unverified third-party/community operational dependency with medium provenance.