continuous-learning-v2

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's import command (scripts/instinct-cli.py -> cmd_import) explicitly fetches arbitrary http(s) URLs via urllib.request.urlopen and parses/imports the returned content as "inherited" instincts, which are then loaded and can influence evolution into skills/commands/agents (see SKILL.md and the import implementation), so untrusted third‑party content can materially change agent behavior.