chief-install

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill instructs the agent to fetch and clone the public repository at https://github.com/thaitype/chief.git and to run its setup script (.chief-agent-tmp/scripts/setup.sh) and/or copy template files from the cloned .chief-agent-tmp/template/ into the project, so untrusted third-party content from GitHub is ingested and can materially influence agent behavior and actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill clones and runs a remote setup script from https://github.com/thaitype/chief.git (git clone ... && bash .chief-agent-tmp/scripts/setup.sh), which fetches and executes remote code and provides agent templates that directly control prompts, so it is a runtime external dependency that can execute code and alter instructions.