uat-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests PR descriptions via gh pr view when checking for feature specs, which is an outsider-authored submission path.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs users to install a third-party plugin repository via /plugin marketplace add ooiyeefei/ccc and /plugin install ccc-skills@ccc, which constitutes an unverified external operational dependency from an unofficial individual publisher repository.