lovstudio-cc-mv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md Step 3/4 shows the workflow runs npx -y @lovstudio/cc-mv <FROM> --list-sessions --json, which causes the agent to read ~/.claude/projects/<slug>/*.jsonl and use firstUserPrompt (user-authored chat text) for session filtering/matching.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes npx to fetch and execute the remote npm package @lovstudio/cc-mv (and its alias @lovstudio/cc-migrate-session) at runtime (e.g., "npx -y @lovstudio/cc-mv"), which causes remote code to be fetched and executed and is therefore a runtime external code dependency.