opa-compat-check

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow fetches and ingests first-party OPA release notes and documentation pages from fixed provider URLs (GitHub releases and openpolicyagent.org docs), not outsider-authored free text submitted via an interactive feed/queue that the workflow monitors without selecting specific items.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs downloading and executing a remote OPA binary via curl at https://github.com/open-policy-agent/opa/releases/download/v{LATEST_VERSION}/opa_linux_amd64_static (and the similar https://github.com/open-policy-agent/opa/releases/download/v{VERSION}/opa_linux_amd64_static) and to clone the OPA repo from https://github.com/open-policy-agent/opa/, which are runtime fetches of remote code that the procedure runs and relies on for IR analysis and conformance tests.