create-mobile-app

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill “Create Power Apps Code App (Native)” ingests outsider-authored free text from the user’s /create-mobile-app description during Step 2 (requirements gathering/discovery) and passes it verbatim into the planner prompt in Step 3 (“Original prompt: <full $ARGUMENTS verbatim>”), making indirect prompt-injection possible.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill runs npx at runtime to generate a QR (Step 12) and explicitly retries package fetches against https://registry.npmjs.org/, meaning remote code from the npm registry may be fetched and executed (e.g., via npx --yes qrcode) as a required runtime dependency.