beatsaber-quest-mod

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow has the agent copy deploy.sh, test/run.sh, mise.toml, CMakeLists.txt and cmake/ from the community repo narze/beatsaber-quest-passthrough-mod, a specific outsider-authored repository the agent must actively fetch, so exposure is low rather than medium.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs setup to copy executable build and deploy files (deploy.sh, test/run.sh, mise.toml, CMakeLists.txt, cmake/) from an individual's GitHub repository, which is an unofficial, reputable-looking source with no warning signs, so the tier is medium.