cursor-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's documented "Issue Fix Workflow" explicitly reads and acts on GitHub issues and repositories (gh_get_issue → gh_clone_repo → cursor_agent_run), meaning it ingests untrusted, user-generated content from public repos/issues and uses that content to drive code changes and agent actions.