skill-creator-advanced

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md Phase 1 Research instructions explicitly require fetching external API documentation using tools like "WebFetch, Firecrawl, or context7 MCP" ("For API Wrappers — 1. Fetch the actual API docs"), which means the agent will ingest and act on untrusted public web content that can influence subsequent tool use and skill generation.