skill-installer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The installer and listing scripts (scripts/install-skill-from-github.py and scripts/list-skills.py, via github_utils.github_request) fetch and ingest repository content from GitHub surfaces (api.github.com, codeload.github.com, raw.githubusercontent.com and github.com) and then read/validate SKILL.md and copy arbitrary skill files (and can wire agent roles), so untrusted user-generated repo content could be interpreted and materially influence agent behavior.