yashandb-app-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Flagged because the required workflow (references/docker-setup.md and SKILL.md step for creating YashanDB) instructs pulling and running a public Docker image (docker pull yashandb/yashandb) and inspecting container logs/exec (docker logs, docker exec), which fetches and surfaces untrusted third‑party content that the agent is expected to read/interpret and that could influence subsequent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs at runtime to fetch and run a remote Docker image (e.g., docker pull yashandb/yashandb:22.2.5.100 and docker run yashandb/yashandb:22.2.5.100), which downloads and executes remote code and is required for providing the YashanDB service.