clone-to-temp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill “Clone to temp” at SKILL.md steps 42-45 fetches outsider-authored content (via user-provided clone/download URLs) into a local .temp/ directory and then reads/searches the fetched files under .temp/... at runtime, creating an indirect prompt-injection exposure from any text included in those downloaded sources.