neta-space

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly instructs the agent to call Neta API endpoints (e.g., get_hashtag_info, get_hashtag_collections, get_hashtag_characters, read_collection) to fetch space/collection/character lore and user collections—untrusted, user-generated third‑party content that the agent is expected to read and use to drive subsequent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs running npx to fetch and execute remote packages (e.g., "npx -y @talesofai/neta-skills@latest list_spaces" and "npx skills add talesofai/neta-skills/skills/neta-creative"), which downloads and runs external code at runtime and is presented as a required dependency.