free-claude-code-proxy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow optionally supports a Discord bot integration (fcc-bot) that monitors chat channels and processes incoming messages through an AI agent, creating an indirect prompt injection vector.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs installation of an arbitrary, personal GitHub repository via uv tool install --force git+https://github.com/Alishahryar1/free-claude-code.git, introducing a weak/unknown/suspicious operational dependency.