cafe3310-skill-installer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow clones an external GitHub repository containing skills authored by third parties, whose contents are ingested and executed by the agent at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The installation script clones an external GitHub repository from github.com/cafe3310/public-agent-skills.git at runtime to pull down and install skill content and scripts.