tech-stack-evaluator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow and scripts (SKILL.md: "ecosystem_analyzer.py" and the rule "Never assess ecosystem health without checking GitHub activity, download trends, and community support") explicitly require fetching and interpreting public third‑party data (GitHub, npm, community metrics), which the agent would read and use to drive recommendations, creating a clear avenue for indirect prompt injection.