umbraco-skill-test-runner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill's runner (scripts/run-tests.ts) invokes npm install in example directories (runNpmInstall) which pulls packages from the public npm registry, uses curl to probe an arbitrary UMBRACO_URL (checkUmbracoHealth), and captures test stdout/stderr into the generated report (runTest), so it clearly ingests and interprets untrusted third‑party content.