portal-dev-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow consumes app manifests and catalog entries via HTTP (curl) from MANIFEST_STORE or --from URLs, which can contain outsider-authored free text when pointing to an untrusted or external store.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The script fetches catalog information from an arbitrary, user-configured MANIFEST_STORE URL over HTTP at runtime without enforced authentication/integrity digests, constituting an unverifiable runtime external dependency with weak provenance.