setup-pre-commit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required steps (Steps 2–4 and verification Step 7 in SKILL.md) explicitly call for installing and running packages via the package manager and npx (husky, lint-staged, prettier), which fetches and executes untrusted third-party code from public package registries (e.g., npm), so external content can influence runtime behavior.