unity-technologies-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/audit-pack.py, the runtime reads outsider-authored free text from the local Git checkout by ingesting skills/*/SKILL.md, README.md, and other support files via read_text() during the doctor/inventory/plan workflows (which can operate on user-supplied repo paths).