trivy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's Quick Start and usage examples (e.g., "trivy repo https://github.com/knqyf263/trivy" and "trivy image python:3.4-alpine") show it fetches and scans public GitHub repos and container images (Docker Hub), which are untrusted, user-controlled third-party content that the agent would ingest as part of its workflow.