crabbox

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md requires/relies on running the installed Crabbox CLI that reads local .crabbox.yaml/config show and may perform remote CI proof (e.g., --fresh-pr <owner/repo#number>), but the workflow does not specify an agent runtime that directly ingests arbitrary outsider-authored free text without first selecting a specific item and route; it primarily handles user-provided commands/IDs and provider-run artifacts rather than monitoring broad outsider text sources.