agent-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The "Agency Agents Repo — 120 Pre-Built Subagent Personas" section explicitly instructs cloning the public GitHub repo https://github.com/msitarzewski/agency-agents and copying its .md persona files into ~/.claude/agents/, which causes the agent to ingest untrusted, user-contributed persona prompts that can alter agent behavior.