abapgit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's Setup instructions explicitly tell the user/agent to download and copy code from the public URL https://raw.githubusercontent.com/abapGit/build/main/zabapgit_standalone.prog.abap into an SAP report (SKILL.md, "Installing abapGit Standalone"), meaning it fetches and ingests untrusted third‑party content that will be read/interpreted and can materially alter behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs users to download and install code from https://raw.githubusercontent.com/abapGit/build/main/zabapgit_standalone.prog.abap (copy into an ABAP report and activate/run it), which fetches remote code that will be executed in the target system and is presented as a required installation dependency.