mastra-smoke-test

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's release workflow explicitly tells the operator/agent to fetch and inspect GitHub PRs and diffs (e.g., via gh pr view, gh pr diff and the discover-release-scope.sh/check-versioning-pr.sh flows in references/alpha-versioning-pr.md and references/release-scope-discovery.md), which are untrusted, user-generated third‑party contents the agent is expected to read/interpret and that can materially influence merge/release decisions and follow-up actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill repeatedly instructs running pnpx/pnpm to fetch and run the mastra npm package (e.g., "pnpx mastra@latest" which pulls code from the npm registry https://registry.npmjs.org) as part of deploy/auth/test flows, so it clearly fetches and executes remote code at runtime and is a required dependency.