write-tickets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads existing issues from a GitHub issue tracker library (Setup Project), which ingests outsider-authored free text from issues and pull requests.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). An npx command installs a package from GitHub (SirDarcanos/agentskills), representing an operational remote repository dependency with unknown publisher provenance.