netdata-collector-config

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow includes fetching and reading cookbook recipe content from the public GitHub repository at runtime (e.g., rules/recipes.md instructs reading README.md and otelcol.yaml from raw.githubusercontent.com), which is outsider-authored free text that can be ingested into the agent/LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs live fetching of cookbook recipes and applying remote YAML (e.g. https://api.github.com/repos/netdata/otelcol-cookbook/contents and kubectl apply -f https://github.com/open-telemetry/opentelemetry-operator/releases/latest/download/opentelemetry-operator.yaml), so external content is fetched at runtime and directly controls the configuration/executes code.