Geek-skills-solution-architect

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md "工作流程" and "工具使用" sections explicitly instruct the agent to perform web_search and web_fetch on arbitrary public/authority URLs and to read those web pages to inform design and technical decisions, so untrusted third-party content can be ingested and influence subsequent actions.