implementing-threat-modeling-with-mitre-attack

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly fetches and parses public ATT&CK STIX data (SKILL.md Step 1 uses requests.get on https://raw.githubusercontent.com/mitre/cti/master/enterprise-attack/enterprise-attack.json and scripts/agent.py calls attackcti.attack_client() to retrieve groups/techniques), and that externally sourced content is directly read and used to build threat profiles, gap analyses, and remediation/prioritization decisions — i.e., third-party data can materially influence agent behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes a runtime fetch of ATT&CK STIX data from https://raw.githubusercontent.com/mitre/cti/master/enterprise-attack/enterprise-attack.json which is loaded into the agent's runtime context and directly drives its threat-profiling outputs, making this a required external dependency that controls the agent's behavior.