ship

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads and inspects GitHub pull request checks and state using the GitHub CLI (gh pr checks and gh pr view), which can reflect outsider-authored PR metadata or check statuses on public or shared repositories.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The README instructs installation via npm (npx skills add sleeplessv/relentless-data-skills/skills/ship) and Claude Code plugin commands referencing a personal GitHub repository, constituting a common/reputable unofficial operational dependency.