ccmvn

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly describes using ccmvn to access Maven Central (public third-party repository) and to run Maven builds that download and process third‑party artifacts (see "How ccmvn Works" and "Basic Usage"), so the agent will fetch and act on untrusted external content from Maven Central which could influence build execution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). This skill invokes npx ccmvn at runtime, which fetches and executes the remote npm package (see https://www.npmjs.com/package/ccmvn and its source https://github.com/ctalau/ccmvn), so the npm/GitHub URLs are runtime external dependencies that execute remote code.