shell-portability

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The "Command Existence Check" example shows running curl "$url" or wget -O- "$url", which would fetch and output arbitrary public web content (untrusted user-controlled URLs) for the agent/script to read, creating a clear exposure to indirect prompt injection.