factory-files

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/validate_factory_files.py, the runtime path collect_tree() reads resource file bytes from the (user-authored) Factory repository (e.g., factory.yaml and agents/**/agent.md, etc.) and then validate() submits that text to the validation endpoint via /api/v1/factory-files/validate.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's validator and documentation invoke the warp-server at https://app.warp.dev (for example https://app.warp.dev/api/v1/factory-files/schemas and the validation endpoint) during runtime and the server's responses are used to produce the validation outcome and the exact disclosure the agent must repeat, so remote content directly controls agent output.