update-project

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). During the required workflow, scripts/update-project.py reads outsider-authored free text from the user repository at runtime—specifically .copier-answers.yml via load_answers() (YAML parsing) and tasks.md discovery plus git-visible changed/untracked file contents via scan_conflicts() → path.read_text()—before proceeding with Copier update/migration routing.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The updater uses the template source "gh:RobertDeRose/dstack" (and other Git-style sources recorded in Copier answers) at runtime via copier.run_copy/run_update, which fetches remote repository content that can include and lead to executing scripts from the template (e.g., scripts/setup-tooling.py), so the remote Git URL directly controls code executed by the skill.