setup-esm-remote-tool

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes starting and exposing an MCP tool (“http://127.0.0.1:8008/mcp”) and validating by calling esm_embed_sequence with caller-supplied JSON ({"sequence":"MKT"}), so outsider free text is ingested when the caller invokes the tool.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs runtime installation of a remote wheel that fetches and installs executable code from https://connect.aiscientist.tools/downloads/tuplatform_connect-0.3.0-py3-none-any.whl#sha256=3fad5eee5ecf7887a693d93ccd1aa112dc0955617a885d1fc3daded0030f9ae0, which is a required dependency fetched during setup and can execute code.