devops-update-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests outsider-authored GitHub free text at runtime when it runs git show origin/main:package.json, and later previews changes via git log --oneline HEAD..origin/main and git diff --stat HEAD..origin/main (also WHATS_NEW.md/release notes if available), reading content authored in the remote repo.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill fetches and merges code from the remote repository https://github.com/lensetek/Startup-Agent-Skills-Hub (and may download its ZIP at https://github.com/lensetek/Startup-Agent-Skills-Hub/archive/refs/heads/main.zip) at runtime and then runs repository-supplied code (e.g., node bin/cli.js), meaning remote content can be executed locally.