agent-reach

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The agent skill provides tools to read and search public platforms and feeds such as GitHub issues, Reddit posts, and social media feeds where outsiders can submit arbitrary text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes pipx install https://github.com/Panniantong/agent-reach/archive/main.zip during preflight execution, introducing an operational dependency from an arbitrary personal GitHub repository with weak/unknown publisher provenance.