force-update

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime path fetches remote configuration text (e.g., RemoteJSONVersionChecker uses URLSession.data(from:) to download JSON from a user-supplied endpoint, then decodes fields like minimumVersionMessage/recommendedVersionMessage into UpdateRequirement that is rendered in ForceUpdateView/SoftUpdateBannerView).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill performs runtime fetches that directly determine UI/control flow: RemoteJSONVersionChecker (defaulting to https://api.example.com/app-config) fetches JSON used to decide hard/soft update prompts, and AppStoreLookupChecker queries https://itunes.apple.com/lookup?... at runtime to decide whether to show update prompts, so remote content directly controls the agent's prompts.