commercevault-edd-commerce-orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow integrates with the Easy Digital Downloads API to retrieve product, order, and customer data, which contains user-submitted content such as order notes and customer names from the store's database.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill contains an explicit GitHub repository locator used for cloning and installing the tool (https://github.com/dhapat3927/mcp-edd-analytics-vantage.git), establishing an operational dependency on an unverified personal repository, which rates high.