agent-install

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to download and install a binary tool from GitHub releases using curl and tar, which involves ingestion of outsider-authored release artifacts and version metadata from a public registry.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill executes curl to fetch release metadata and binary assets from GitHub for the pup tool during setup, representing an unverified runtime external dependency.