bloat-detector

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's ai-generated-bloat module (modules/ai-generated-bloat.md) explicitly calls "npm view $pkg version" against the public npm registry to detect "hallucinated" dependencies, which ingests untrusted third-party package metadata and uses that result to decide remediation actions (e.g., DELETE or REPLACE), so external content can materially influence the agent's decisions.