nuka-soft-brand

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md "Theme Pipeline" explicitly says Cassian "scrapes faction visual references — official wikis, modding repos (Nexus, GitHub), fan art guides, game UI screenshots," which clearly ingests untrusted/user-generated third-party content that the agent is expected to read and use to build style guides and themes, allowing those sources to materially influence downstream behavior.