atmos-plugins

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required consume workflow installs compiled releases, which are not LLM-readable text, but atmos plugin search runs against user-configured registries whose outsider-published package names and descriptions the agent must actively query, so this is low exposure.