upstash-box-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill describes a CLI tool (box) to manage remote sandboxed workspaces, allowing the agent to read files, clone repositories, open pull requests, and interact with web pages or browser content. While it can fetch arbitrary web pages or clone repos, it does not ingest automated outsider-authored feeds or queues by default.