team-skill-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The workflow's Decision Points explicitly state that when "the user provides a GitHub repo with SKILL.md" the process should package the repo's skill directory directly, meaning the agent will fetch and interpret external, user-generated content from GitHub and then publish/use it.