xy-sync

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches update notifications and metadata from a remote update URL configured by XY_UPDATE_URL or config.json, processing JSON fields (like notice) which are incorporated into agent responses.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script fetches remote update metadata via curl from a dynamic URL configured by the user via environment variables or a local config file, which is an unverifiable runtime external dependency under user/runtime control.