oracle-db

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's installer script (INSTALL.ps1) explicitly clones the public GitHub repository https://github.com/iwanhe/oracle-db-skills.git and AGENTS.md directs the agent to load and read those skill files, so the agent will ingest untrusted, user-generated content from the open web that can influence its answers and actions.