find-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s runtime workflow (per SKILL.md) uses npx skills find [query] to search for skills and then lists/links results, meaning it ingests outsider-authored free text only when searching the open skills ecosystem for a user-provided query (i.e., it performs selection/search over third-party skill metadata/content).