performing-supply-chain-attack-simulation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill queries the PyPI JSON API and public package registries to retrieve package metadata and descriptions, which are outsider-authored web sources accessed at runtime via low risk rules.