init-python-project

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's fork/enhancement workflow explicitly instructs the agent to "git clone " and then inspect the target repository (SKILL.md Step 2B.1 and references/fork-enhancement.md), which means it ingests arbitrary public GitHub repo content (untrusted, user-generated) that can materially influence subsequent edits, tests, and toolchain decisions.