kotlin-toolchain

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow (scaffolding and building a Kotlin Toolchain repo via local wrapper ./kotlin plus project.yaml/module.yaml/plugin.yaml and related files) is based on repo contents written by the user, and those YAML/wrapper/plugin files are explicitly treated as untrusted data but are still ingested by the Toolchain build process, meaning outsider-authored free text in that repo can reach the LLM/runtime steps.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill and its eval harness explicitly rely on downloading and running the Kotlin Toolchain CLI at runtime (the local wrapper "downloads the CLI itself"), and the referenced distribution/source URLs are https://kotlin-toolchain.org/ and https://github.com/JetBrains/kotlin-toolchain, which are used to fetch and execute remote code.