install-plugins

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow describes installing local plugins and references a GitHub repository for a plugin marketplace, which involves fetching community-published code and packages rather than consuming unselected outsider feeds at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs cloning an arbitrary third-party GitHub repository to install operational scripts and symlinks, representing an unofficial external runtime dependency with weak provenance.