tool-inventory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md's "Discovery beyond the inventory" step explicitly instructs the agent to "scan these topic feeds" (e.g., https://github.com/topics/datavisualization), which are public GitHub topic pages hosting user-generated repository descriptions and READMEs that the agent would read and could materially influence tool selection or next actions.