generate-openenv-env

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow (SKILL.md Step 2: "Search upstream docs/repo for the target library when local context is insufficient") explicitly requires fetching and interpreting upstream public docs/repos, which are untrusted third‑party sources and whose content will be used to drive implementation decisions, so they could inject instructions that change the agent's actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The Dockerfile contains a build step that runs "curl -LsSf https://astral.sh/uv/install.sh | sh", which fetches and directly executes a remote install script during image build (e.g., via openenv build/docker build), making this URL a required runtime-executed external dependency.