fit-ride-studio

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL’s runtime workflow ingests outsider-authored free text embedded in the user-supplied FIT/KML files via scripts/analyze-fit.mjs (--format markdown|json <fit-or-kml-path>), i.e., the attacker can submit a poisoned .kml/.fit file whose parsed fields are then used to generate report text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to run installation at runtime (npm ci when NEED_INSTALL), and package-lock.json contains explicit npm tarball URLs that would be fetched and executed (for example https://registry.npmjs.org/fit-file-parser/-/fit-file-parser-3.1.0.tgz), so remote code is pulled during runtime.