marketplace-publish-extension

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can enter the LLM context via the tool’s runtime output context fields derived from SKILL.md frontmatter (e.g., description, metadata.dcc-mcp.*), which is authored by the extension publisher (an outsider) and is read from extension_dir/SKILL.md and then returned in the tool result.