setting-up-veris

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The raw.githubusercontent.com URL is a direct shell installer (curl | sh) hosting an executable script from a GitHub repo — a high-risk distribution pattern for malware delivery; the api.veris.ai endpoint is an API base (not a downloadable executable).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the workflow runs scripts/preflight.sh, which fetches free-text JSON from the Veris control plane via curl ... "$base/v1/environments/$env_id" (using an API key), and later it instructs the agent to call get_testing_guide/get_environment/sandbox tools over the registered Veris MCP server, meaning outsider-authored content from a non-first-party control-plane endpoint can be ingested.