vibe-clean

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's audit workflow explicitly requires checking imports and package metadata against public registries and homepages (references/audit.md "Slopsquatting checklist" and SKILL.md §3 "Verify every dependency"), meaning the agent will fetch and interpret untrusted third‑party package pages/docs which can materially influence merge/block decisions and tool actions.