prowler-attack-paths-query

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow instructs the agent to fetch path definitions and research catalogs from GitHub repositories (pathfinding.cloud) using curl or WebFetch, which exposes the agent to outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to fetch pathfinding.cloud reference files from GitHub (https://raw.githubusercontent.com/DataDog/pathfinding.cloud/main/docs/paths.json) at runtime, constituting a common unofficial operational dependency.