kotlin-multiplatform-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow reads outsider-authored free text from the consumer project’s repository files (including project-owned agents/*.md and .codex/agents/*.toml) by recursively loading and regex-scanning their contents in scripts/audit_project.py (e.g., _detect_agent_file_standards() / _detect_project_skill_standards() read and parse SKILL.md/agent files as text).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL.md contains a GitHub Actions reusable workflow reference "uses: ronjunevaldoz/kmm-agent-skills/.github/workflows/kmm-audit.yml@main" (and the related "ronjunevaldoz/kmm-agent-skills" repo pin) which will be fetched and executed at consumer CI/runtime and thus represents an external repository whose remote code controls execution of the governance/audit steps.