fit-pathway

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The CLI explicitly supports ingesting external data from arbitrary URLs and pack repositories (see SKILL.md and references/cli.md: "npx fit-pathway update --url=URL" and "npx fit-pathway build --url=..."/serve enabling git smart HTTP), which would be pulled into the tool's data directory and directly influence job/agent derivation and behavior.