running-test262

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly consumes the public TC39 test262 submodule (see "TC39 test262 spec: https://github.com/tc39/test262" and "The test262 suite is a git submodule") and its runners parse each test's metadata block (e.g., "The runner uses each test's metadata block ('/--- features: [...] ---/') to decide whether to run or skip"), so untrusted, user-authored test files are read and can directly influence execution and runner decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill depends on the test262 git submodule (https://github.com/tc39/test262) which may be fetched via git submodule update and whose test files are executed by the runners, meaning remote code from that URL is fetched and run as a required dependency.