create-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill fetches a helper markdown file from GitHub (https://raw.githubusercontent.com/...), which is an active fetch of selected outsider-accessible content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs fetching skill material and references from a remote GitHub repository (raw.githubusercontent.com/spacemansh/spaceman-skills) under an individual's personal username, which constitutes a common/reputable unofficial operational dependency.