ai-music-album

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to open and install an upstream public GitHub repo (https://github.com/bitwize-music-studio/claude-ai-music-skills) so the agent would fetch and run user-provided assets, scripts, and references from an untrusted third-party source, which could influence its actions.