aspireify

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow for aspireify, it scans and consumes the user’s repository files at runtime (e.g., .env/.config, docker-compose*.y*ml, *.csproj/package.json sources) via the scan steps before proposing/editing the AppHost, so outsider-authored free text from queued inputs like repo files can be ingested without selecting a specific item.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs installing the Aspire CLI via a curl piped to bash command that would fetch and execute remote code at https://aspire.dev/install.sh, which is a runtime fetch-and-execute dependency.