setup-project

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required runtime workflow ingests the target repository’s root AGENTS.md and other repo files (e.g., CONTEXT.md, package.json, testing signals, and various fragments it reads from within the skill folder), which can include outsider-authored text from the repository itself.