sync-manifest-dev

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly clones/pulls content from the public GitHub repo https://github.com/doodledood/manifest-dev.git and copies agents/hooks/skills into the local .claude/ directory, which the agent will load and which can change agent behavior, enabling indirect prompt injection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill explicitly clones/pulls https://github.com/doodledood/manifest-dev.git at runtime and copies its agents/skills/hooks into the local .claude/ directory, so fetched repository files (prompts, skill definitions, or hook code) can directly control agent instructions or execute code.