threadwave-update

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required runtime workflow fetches outsider-authored free text from GitHub’s release-index.json via a fixed curl/Invoke-WebRequest command and then validates/uses its JSON fields (outsider text = GitHub-hosted index content).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly requires a runtime HTTPS read of the release index at https://raw.githubusercontent.com/ohmyskyhigh/threadwave-skill/main/release-index.json (used in the curl/PowerShell commands and in skill-manifest.json) and that fetched JSON is used as the authoritative roster that determines which skills the agent checks, so this is a required runtime external dependency that directly controls agent behavior.