manage-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and executes an upstream installer from a public URL (scripts/install-amctl.sh → https://raw.githubusercontent.com/wso2/agent-manager/main/scripts/install-amctl.sh) and its required workflow mandates running and parsing amctl <verb> --help (third‑party binary output) to decide flags and next actions, so untrusted external content is consumed and can influence behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The bundled installer (scripts/install-amctl.sh) will curl and pipe to sh the upstream installer at https://raw.githubusercontent.com/wso2/agent-manager/main/scripts/install-amctl.sh during runtime, which directly executes remote code and is used to install the required amctl dependency.