life-decision-guide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent skill retrieves a public repository containing a life-decision guide via git clone or curl from GitHub, which is a low-risk active fetch of external content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to clone or download repository content from GitHub (https://github.com/eternity4719/HowToLiveBetter.git and https://raw.githubusercontent.com/...) at runtime to obtain its operational rules and book text, representing an unverified third-party external repository dependency with medium provenance.