iros-registry-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md shows the automation driving and scraping the public IROS website (https://iros.go.kr) via Playwright (e.g., iros_cart_by_corpnum.py, iros_download.py, iros_cart_realty.py), so the agent consumes live public web pages as part of its workflow and those pages can change and materially affect subsequent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill's setup explicitly instructs cloning and running code from https://github.com/challengekim/iros-registry-automation.git (git clone ... then running python scripts), which fetches remote code that is executed and is a required dependency for the skill.