best-practices-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s runtime reads outsider-authored project files (e.g., it uses the Read tool to ingest the repository’s CLAUDE.md and a reference file under .claude/skills/...), and that readable Markdown can contain arbitrary free text from parties other than the operating user.