skill-brief

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SOURCE mode, the runtime explicitly reads candidate skills’ SKILL.md files produced by find-skills (skills.sh/Skills CLI/GitHub code search/collections/local installs), so outsider-authored free text from third-party repos/issues in those manifests is ingested without selecting a specific item first.