base

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md's help text includes the "android update --url=PARAM" option which tells the agent to download an update from an arbitrary URL (an open/public third‑party source), meaning the agent would fetch and incorporate untrusted remote content that could materially change tool behavior.