config-project-fullstack

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The script runs npx create-turbo@latest and npx create-next-app@latest at runtime, which fetches public/community package templates and scaffolding content (outsider-authored) into the temporary scaffold directory that is then copied into the target workspace and thus becomes LLM-readable prose via subsequent file operations.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The script executes runtime package fetch/bootstrapping commands that pull and run remote code from the npm registry (e.g., "npx create-turbo@latest" and "npx create-next-app@latest", and installs/runs "@nestjs/cli" / "@nestjs/config" via npm which fetch from https://registry.npmjs.org/), so it relies on and executes external code at runtime.