pi-extension-intake

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow explicitly requires inspecting third-party extension code and manifests ("Workflow" step 2: "Read the package manifest and extension entry point") and references upstream repo URLs for provenance, so the agent will ingest untrusted/public repo content that can materially influence its recommendations and actions.