electrobun-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The Updater explicitly fetches untrusted public release files from the configured baseUrl (e.g., "{baseUrl}/{channel}-{os}-{arch}-update.json" and subsequent .patch/.tar.zst downloads described in SKILL.md and the CLI/API reference), and the agent reads and acts on that content (deciding to download/apply updates), so third-party files can materially influence tool behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The build pipeline explicitly downloads required native binaries at runtime from GitHub Releases (https://github.com/) which are executed as part of the build/updater process, so remote content can run code and thus poses a runtime-execution risk.