vos-remix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow fetches programs from vos.so/vos/<id> and gallery endpoints, which can be authored by arbitrary platform users.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs installing an npm package from an external registry (@vosjs/cli) and interacting with a remote API (vos.so), which constitutes an operational dependency with common/reputable official or unofficial provenance.