skill-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md's Phase 2 Research step explicitly instructs the agent to "Use web search for domain terminology, frameworks, and named patterns," which requires fetching and ingesting open/public third‑party web content that the agent will read and use to shape vocabulary, anti‑patterns, and behavior—exposing it to untrusted content that could carry indirect prompt injections.