repo-intake-and-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly reads and interprets arbitrary repository README and project files (see SKILL.md "Access to README and common project files" and scripts/extract_commands.py which opens and parses README content), so untrusted user-generated README content can materially influence command classification and recommended reproduction actions.