clerk-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly instructs the agent to WebFetch the public quickstart pages (WebFetch: https://clerk.com/docs/{framework}/getting-started/quickstart) and to "Extract the complete setup instructions..." and then "Follow the Instructions", meaning the agent must read and act on third-party web content as part of its workflow, which could materially change actions based on that content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs a runtime WebFetch of the quickstart (WebFetch: https://clerk.com/docs/{framework}/getting-started/quickstart) and directs the agent to "Extract the complete setup instructions…", so fetched remote content would directly control the agent's prompts/instructions and is required for the setup.