rust-crate-source

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly queries the crates.io API to obtain repository URLs and then clones those external repositories into /tmp/rust-crates for the agent to read and explore (see "Step 1: Fetch Crate Info" and "Step 2: Clone Repository" in SKILL.md), which pulls untrusted, user-generated third-party content that the agent will interpret as part of its workflow.