express-oauth2-jwt-bearer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md contains a required "Agent instruction" to run a GitHub API call (gh api repos/auth0/node-oauth2-jwt-bearer/releases/latest) and use the returned release tag when populating package.json, which clearly fetches untrusted public third-party content (GitHub releases) and uses it to drive subsequent actions (dependency selection), enabling indirect prompt injection.