weaviate-cookbooks

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These URLs include direct download/install shell scripts (install.sh) that are commonly executed locally via curl|sh — a high-risk distribution vector even when hosted on legitimate-looking domains, so treat them with caution and verify contents before running.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests outsider-authored free text via user/HTTP input to the Query Agent chatbot and then passes it into the Weaviate Query Agent’s ask/ask_stream calls (which will read/operate on that text).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The cookbook includes setup commands that download-and-execute remote installer scripts via curl | sh (https://astral.sh/uv/install.sh and https://ollama.com/install.sh) as required steps for the toolchain (uv and Ollama), so these external URLs would execute remote code during setup/runtime.