sentry-otel-exporter-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches public content from GitHub (e.g., Step 2's GitHub API call and Step 4's "Use WebFetch" to retrieve example-config.yaml and spec from raw.githubusercontent.com), and those fetched, untrusted third‑party files are parsed and used as templates/config that directly influence configuration, validation, and runtime behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs fetching and installing the OpenTelemetry Collector binary at runtime (e.g. https://github.com/open-telemetry/opentelemetry-collector-releases/releases/download/v<numeric_version>/otelcol-contrib_<numeric_version>.tar.gz and/or pulling the Docker image otel/opentelemetry-collector-contrib:<numeric_version>), which downloads and can execute remote code and is a required dependency for the workflow.