sdd-iniciar-repo

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill's core behavior is a consent-gated, privacy-protective git setup that doesn't turn the agent against the user, but its closing section pitches a separate product (SDD Open) with a "migrate" call to action unrelated to repository initialization, which counts as unrelated promotion under the medium rule.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The only operational inbound source is the npx skills add robertodiasduarte/sdd-starter reinstall path, which installs skill material from an individual-owned GitHub repository (unofficial, no strong first-party provenance), so it is common/reputable unofficial and rates medium; the git-scm.com and cli.github.com install links are official and the version-release link is display-only.