uv-advanced-dependencies

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly instructs fetching dependencies from arbitrary third-party sources—e.g., git repositories via "uv add git+https://...", direct URL packages via "uv add https://...", and custom/extra indexes or find-links (see SKILL.md and REFERENCE.md entries for extra-index-url/find-links)—which are untrusted user-hosted content the agent will read/interpret during dependency resolution and can materially influence subsequent actions.