agent-file-transfer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow has the agent receive live calls and files from a counterpart agent dialed by an outside @number, so outsider-authored content reaches the agent without it selecting a specific item, and the human accept step gates the call but does not review content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The setup path has the user download an installable app from foragent.io and connect the agent to the remote MCP endpoint https://foragent.io/mcp, which supplies runtime tools; nothing in the skill establishes that foragent.io is a recognized first-party publisher, so provenance is unknown and the tier is high.