store-longevity-radar

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). scripts/store_longevity_radar.py reads free text from the outsider-accessible public dataset page (DATASET_PAGE) and downloads ZIP/CSV contents (including any CSV fields like 상호명) without any filtering to a specific, trusted item.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's SKILL.md requires running npx -y @nomadamas/k-skill@0 instruct store-longevity-radar which fetches and executes a remote npm package at runtime to produce the primary instructions that control the skill behavior (npx -y @nomadamas/k-skill@0 instruct store-longevity-radar).