make-pdf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's mandatory preamble ("Preamble (run first)") performs git fetch/merge and calls gstack-brain-sync (pulling artifacts from remote origins), and the CLI/render pipeline also exposes a --allow-network option that will fetch external image URLs into Chromium — together these show the skill fetches untrusted third-party content (remote git/artifacts and arbitrary web resources) that can be incorporated into project files (e.g., CLAUDE.md/routing or synced learnings) and thus materially influence routing/behavior and subsequent tool actions.