zopack

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's import workflow (SKILL.md "Import" section) and scripts/import.ts explicitly read a user-supplied .zopack.md file from the filesystem, parse route code, npm deps, and component URLs from that pack, and then drive installs and route deployments—meaning arbitrary third‑party pack content can directly influence tool actions and execution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The import/deploy workflow installs external packages and components at runtime (e.g., running "npx shadcn@latest add https://animate-ui.com/r/.json" and "bun add "), so URLs like https://animate-ui.com/r/.json (and npm registry fetches) are fetched during runtime and can deliver/execute remote code that controls deployed behavior.