jenkins-agent-l3-deploy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests git repositories via SCM checkout (branch B02 and pipeline setup), which can pull untrusted external repository code depending on configuration.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The curl command at line 103 downloads agent.jar from an arbitrary user-supplied controller IP address (http://<CONTROLLER>:8080/jnlpJars/agent.jar), representing a weak/unknown runtime external dependency.