scaffold-hooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, the skill scaffolds/refreshes hook adapters by inspecting and rewriting repo-local files like .claude/settings*.json, .codex/hooks.json, .devin/hooks.v1.json, opencode.json/.opencode/hook/hooks.md, and .github/hooks/copilot-hooks.json, so any outsider-authored text would only enter via user-controlled repository contents that this skill reads at runtime (e.g., existing managed/non-managed files and project scripts) rather than via arbitrary external sources.