p-skill-installer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 在 SKILL.md 中，运行时路径是用 npx skills add ... vercel-labs/agent-skills/owner/repo 从 GitHub 克隆并把仓库内的 skills/<skill-name>/SKILL.md 安装到 ~/.agents/skills，因此会摄取并读取由第三方仓库作者在这些文件/仓库中提供的自由文本。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL installer invokes remote package/repo fetches that execute code at runtime (npx and git), for example https://github.com/vercel-labs/agent-skills.git is cloned/used during installation and thus can execute remote code.