nts-tax-delinquency

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent actively searches external NTS tax delinquency records using user-provided corporate/trade names via nts_tax_delinquency.py.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill fetches setup instructions and packages at runtime from an unofficial GitHub repository and npm registry (github.com/NomaDamas/k-skill and @nomadamas/k-skill), which constitutes a weak/unknown/suspicious operational dependency.