dynamo-router-starter

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Two of the links (an Intigriti NVIDIA program page and localhost http://127.0.0.1:8000) are not download hosts and are low risk, but the GitHub releases URL (https://github.com/ai-dynamo/dynamo/releases/latest) can host binaries from an unverified/third‑party account and therefore could be used to distribute malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime path runs scripts/check_router_health.py, which fetches readable JSON from the user-supplied --base-url via HTTP (GET {base_url}/v1/models and POST {base_url}/v1/chat/completions), so any outsider-controlled server response/body text can be ingested into the agent’s LLM context through the script’s printed JSON.