assimilate-popular-workflows

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md requires runtime discovery of public GitHub repos and registries (e.g., ClawHub) and then “fetch”/“shallow-clone” and read outsider-authored SKILL.md/README content to produce research.md, which would be ingested as free text into the agent’s LLM context during Phase 2/3.