live-dependency-resolver

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly directs the agent to fetch and parse live data from public registries (e.g., registry.npmjs.org, pypi.org, crates.io, rubygems.org, proxy.golang.org) via CLI or web-API fallbacks and to use those results to choose versions and install commands, which is reading untrusted third-party content that can materially influence tool use and next actions.