go-ecosystem-upgrade

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads outsider-authored free text from the user/organization’s repositories and files (e.g., it enumerates and inspects consumer go.mod/go.work, then runs commands like go test ./... and generates diffs), which are not limited to first-party provider content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs runtime commands that fetch and execute remote modules such as "go get github.com/foo/bar@v1.2.0" (and relies on the module proxy sum.golang.org), which are external dependencies used at runtime that pull and run remote code.