effect-usage-cc

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md "Fetching Documentation" workflow explicitly instructs agents to use mcp__exa__web_search_exa and WebFetch (and related doc-query tools) to retrieve public web/blog/docs (untrusted third‑party content) which the agent is expected to read and use to influence architectural decisions.