nix-profile-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill instructs the agent to search, show, and add flakes from public sources (e.g., "nix search github:user/repo", "nix flake show", and "nix registry add myflake github:user/repo" / "nix profile add ... github:user/repo"), and to parse nix search/flake outputs (JSON/text), so the agent will fetch and interpret untrusted user-generated content from third-party sites like GitHub and other public flakes.