claude-skill-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow describes managing and creating Claude Code skills and commands, and mentions browsing GitHub repository trees via gh api and fetching file contents, which involves user-supplied or external repository URLs. However, this repository management and git/gh workflow operates on first-party or user-selected resources without automatic ingestion of unselected outsider feeds. Therefore, it is evaluated as low risk due to active fetching/searching patterns.