water-fluid-shaders

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md includes a "REFERENCE REPOS — COPY AND STUDY" section (e.g., links to nvjob, bmjoy, and other public GitHub repos and external tutorial sites) which instructs the agent to fetch and study public, user-maintained third-party content that the agent would read and use to guide shader decisions, so untrusted web content could indirectly inject instructions.