neta-elementum

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill exposes the agent to user-generated PUBLIC Elementum data (see accessibility="PUBLIC" and the global search/list/request commands in SKILL.md and references) and instructs Agents to read the element's agent-facing "description" and stored "prompt" fields and to use them (e.g., via /ElementName passed into make_image), so untrusted third-party content can directly influence tool actions and prompts.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs running remote code at runtime via npx -y @talesofai/neta-skills@latest which fetches and executes an external npm package that performs the create/update/make_image actions and thus can execute remote code and control prompts.