create-backend-plugin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow explicitly runs network package tooling (scripts/scaffold.py invokes npx @backstage/create-app and yarn install) and SKILL.md plus examples/dynamic-plugins.yaml show pulling plugins from public sources (oci://quay.io, https://plugin-registry.example.com/*.tgz, npm) which are untrusted third-party artifacts that the agent will fetch/execute or load and thus can materially influence behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The scaffold script and workflow invoke npx to fetch and run remote npm packages at runtime (e.g., "npx @backstage/create-app@{version}" and later "npx @red-hat-developer-hub/cli@latest"), which downloads and executes remote code that the skill relies on to operate.