docyrus-create-app

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md describes a runtime flow where docyrus apps create --local-development / docyrus apps clone clones a repo (including “remix a template” from an existing app), meaning the agent will ingest outsider-authored repository code/text into the LLM context via the cloned content.