metro-ai-app-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow includes fetching the live skill index and individual skill files from GitHub repositories (github.com and raw.githubusercontent.com), which involves ingesting repository-level content and metadata, but does not monitor or consume unauthenticated outsider-authored submission feeds (like issue trackers, PRs, or chat feeds) without prior selection.