deps-vet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Exclusion: the only outsider-authored free text consumed at runtime is not from an arbitrary user/third-party feed but from a cached Hex tarball contents for an explicitly provided <pkg> <version> (and the optional, trusted built-in seed file), so there is no “post into a queue/feed the workflow reads” path for outsider text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly fetches and caches imported audit ledgers at runtime via curl and then consumes/evaluates imported .exs audit maps (which can execute code) — the allow-listed import URL https://raw.githubusercontent.com/oliver-kriska/claude-elixir-phoenix/main/plugins/elixir-phoenix/skills/deps-vet/priv/hex_vet_seed.exs is thus a runtime external dependency that can control prompts/outcomes.