soia-env-opencode-cli-install

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Required runtime workflow first runs local scripts (scripts/inspect_cli.py reading installed binary/config paths from the first-party references/cli-profile.json and filesystem) and checks latest via scripts/check_latest.py calling GitHub/npm/pypi APIs for release metadata, without ingesting any outsider-authored free text before selecting a specific item.