orca-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill workflow includes an optional AgentMemory service integration that searches persistent cross-session memory via curl GET with a user-supplied query parameter, representing low-risk retrieval of external search results.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references an external persistent memory service URL (https://agentmemory.giatbh.io.vn/) in its instructions for cross-session storage and retrieval, but ownership or official first-party status of this third-party community-hosted endpoint is not established, constituting an unverified operational dependency under weak/unknown provenance rules.