command-research-android

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md only defines a host-agnostic command workflow that “dispatch[es] researcher sub-agent” for Play Store + Reddit research, but it does not specify any runtime step that ingests outsider-authored free text without first selecting specific items, nor does it include the referenced sub-skill implementations.