acsets-dynamic-loader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow step 1 ("Discover references using gh interactome and deepwiki analysis") explicitly requires fetching and interpreting public GitHub and wiki content to discover and order dependency skills, so untrusted, user-generated third-party content can directly influence which tools are loaded and the agent's subsequent actions.