devtools-marketplace

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow is the marketplace “Install” auto-install/injection, which installs and then imports outsider-authored npm package code (public third-party plugin) and injects it into the user’s app/LLM context via the plugin’s exported code (e.g., import { <importName> } from '<packageName>' then ImportName() or <ImportName />).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The marketplace auto-install pipeline runs the package manager to fetch npm packages (e.g., @acme/react-analytics-devtools) from the npm registry (https://registry.npmjs.org) at runtime and then injects/imports and executes their exports (calls plugin factory or renders components), so remote code is fetched and executed during runtime.