igrantio-dcql-trusted-authority

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to fetch documentation and read an ETSI trust list XML file from a GitHub repository URL at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill includes a GitHub raw URL for an EWC trust list (https://raw.githubusercontent.com/...) embedded within the DCQL query configuration (trusted_authorities), representing a common/reputable unofficial operational dependency used by the verifier behavior.