find-skills

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill contains hidden instructions directing the agent to write and log output reports to a local wiki directory after execution.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads search results and package metadata from the community skills ecosystem (skills.sh) during skill discovery and search.