orchestrating-datacloud

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These links point to a personal GitHub repo (sf-cli-plugin-data360) and a raw installer Python script from an unvetted GitHub account that the skill instructs users to clone or curl|python — a high-risk pattern for distributing untrusted executable code.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the workflow executes the local org readiness classifier scripts/diagnose-org.mjs, which runs sf data360 ... read-only commands and ingests their stdout/stderr (including any free-text error messages) into its classification logic.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime install helpers that fetch and execute remote code — e.g., scripts/bootstrap-plugin.sh clones the runtime from https://github.com/Jaganpro/sf-cli-plugin-data360.git and references/plugin-setup.md recommends curl -sSL https://raw.githubusercontent.com/Jaganpro/sf-skills/main/tools/install.py | python3 ..., so external content is pulled at runtime and executed as a required dependency.