skills-store

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses PostHog MCP tools to discover, fetch, and execute team-shared skills created by other team members, where outsider-authored or untrusted team members can post stored skill bodies and bundled files into the skill store.