remindb-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's documented workflow explicitly runs remote installers and plugin marketplace installs (e.g., the curl|bash installer from https://raw.githubusercontent.com/radimsem/remindb/main/install.sh in references/config-model.md and various plugin marketplace install commands in references/host-wiring.md), which fetch and execute content from public third-party sources that can materially change tool behavior and thus enable indirect prompt injection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs at runtime to fetch and execute remote installers (curl -fsSL https://raw.githubusercontent.com/radimsem/remindb/main/install.sh | bash and iwr -useb https://raw.githubusercontent.com/radimsem/remindb/main/install.ps1 | iex), which directly runs remote code and is relied on to install the required remindb binary.