generate-compile-commands

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to download a release asset from GitHub (https://github.com/microsoft/msbuild-extractor-sample/releases/...), which is a community/public forge where arbitrary users can potentially host releases or issues, but the binary download itself is an explicit URL fetch rather than monitoring or consuming an outsider-submitted text feed.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to download an external Windows executable release of microsoft/msbuild-extractor-sample from GitHub at runtime via Invoke-WebRequest, which is a weak/unknown/suspicious operational dependency because it relies on downloading a binary executable directly from a public repository without enforced cryptographic integrity validation of the download source itself (beyond SHA256 checking of the downloaded artifact against a hardcoded hash inside the skill instructions).