xcode-vercel-release-tracks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime path reads commit subjects and bodies from main history (squashed PR titles) through git-cliff and git log, which outsiders can only get onto main by a maintainer merging their PR, so the attacker can publish text but cannot force delivery.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The only operational inbound dependency is the setup instruction npx skills@1.5.23 add stealth-factory/private-skills, which installs a sibling skill from a GitHub repository owned by an individual or small org with no established first-party provenance, so it is an unofficial dependency with no concrete warning signs (medium); the pinned git-cliff download is checksum-enforced from the upstream project, and the pinned actions and API calls are either SHA-pinned or outbound/data-only.