iot-witness-verify

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow runs an npx command to fetch and execute a package from the public npm registry (@claude-flow/plugin-iot-cognitum@latest), which can ingest outsider-authored free text at runtime via the fetched package’s code/output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes "npx -y -p @claude-flow/plugin-iot-cognitum@latest cognitum-iot witness verify DEVICE_ID", which fetches and executes a remote npm package at runtime, so the fetched content is a required external runtime code dependency.