deepwiki-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to analyze "any local or remote repository" and contains workflow steps and examples that clone and read arbitrary repositories (e.g., SKILL.md / README.md with "git clone {{REPO_URL}}" and prompts like "You are an expert code analyst examining the {repo_type} repository: {repo_url}"), which means it will fetch and interpret untrusted, user-provided third‑party repository content that can influence subsequent actions.