imagekitio

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow interacts with ImageKit.io media storage and file management via the Membrane CLI, where files or metadata retrieved might contain user-generated content, but listing or viewing files requires explicit search/fetch operations rather than monitoring an unselected incoming feed.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the installation and execution of the Membrane CLI (@membranehq/cli) from npm via an unofficial third-party registry scope, constituting an external operational dependency with medium provenance risk.