solidity-auditor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and ingests untrusted third‑party content as part of its run — assets/docs/README.md states “create a file containing one URL per line — they will be fetched and read automatically,” and assets/findings/README.md says “On each run the skill reads every file in this directory,” meaning remote/user-provided web pages or third‑party reports will be read and can influence audit decisions.