otel-java

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md explicitly instructs the agent to fetch public web resources (e.g., WebFetch https://opentelemetry.io/docs/zero-code/java/agent/configuration/ and https://raw.githubusercontent.com/.../CHANGELOG.md and gh API calls to GitHub releases) and to use that fetched content to determine schema/file_format, latest versions, and downloads, so untrusted third‑party pages can influence decisions and actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs downloading and running the Java agent via curl from https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/latest/download/opentelemetry-javaagent.jar which fetches remote code that is then executed with -javaagent (a required runtime dependency), so this URL results in executing external code at runtime.