update-project-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow installs and updates skills from third-party sources and skills.sh registry packages (skills.sh, toy-crane/skills, and others) via CLI commands, exposing the agent to outsider-authored free text from downloaded package content.