oss-sponsors-brand-strategy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to fetch package repositories, dependencies, and funding manifests from external registries and code hosting platforms like deps.dev and GitHub, where untrusted repository metadata or funding files could contain free-text prompt injections.