nix-flakes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill instructs using and fetching remote public GitHub flakes (e.g., nix flake prefetch github:NixOS/nixpkgs, nix run github:numtide/treefmt, and the inputs URL github:nixos/nixpkgs/... in flake.nix), which pulls untrusted third-party repository content that the agent would read/execute as part of its workflow.