adopt-standards

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill fetches a release tag URL from GitHub to resolve the latest version and clones a repository containing instructions and skills, representing low-risk retrieval of selected external code/docs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The script clones a remote repository via HTTPS to bootstrap and execute standards instructions at runtime, making https://github.com/lutzseverino/repository-standards.git a required dependency that controls agent instructions.