auditing-external-claude-plugins

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow runs gather-evidence.sh to clone an arbitrary external Git repository (plugin-repo-url) and fetch its associated npm package registry metadata and tarball, exposing the agent to untrusted external code and metadata.