phaser-gamedev

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). SKILL.md's "When Skills Don't Provide Enough Detail" explicitly instructs the agent to use mcp_web_fetch to fetch https://photonstorm.github.io/... and to search Stack Overflow and GitHub discussions (public, user-generated sites), meaning the agent will fetch and interpret untrusted third‑party content that can influence its decisions and tool use.