ovrtx-addon-install-and-preflight

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s runtime workflow reads only user-provided inputs in the add-on Preferences (e.g., the pasted GitHub Release page URL or absolute folder path under “Install Runtime From”) and then verifies the external manifest/digests before acquiring components, so outsider-authored free text ingestion is gated by explicit user selection rather than automatically monitored delivery sources.