ios-device-support

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill queries public GitHub API repositories (filsv/iOSDeviceSupport and iGhibli/iOS-DeviceSupport) to retrieve inventory trees and README/metadata via scripts/find-support.py, which represents low-risk ingestion of third-party public repository content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script programmatically queries the public GitHub API and raw content endpoints (api.github.com and raw.githubusercontent.com) to fetch repository trees and inventory files at runtime, constituting a common/reputable unofficial operational dependency.