review-open-source-package

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). This skill’s required workflow (inspecting Composer metadata/README/license/changelog/tests/CI and verifying installability) can ingest outsider-authored free-form text from the target open-source package’s README/changelog/tests at runtime, which would then be included in the LLM context for review.