mac-code-local-ai-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow utilizes DuckDuckGo search (ddgs) which fetches external web search results, presenting a low indirect prompt injection risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The repository clone URL references an individual-owned GitHub repository without strong first-party provenance, making it a medium-tier operational dependency.