social-media-skill-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches a curated catalog and README from GitHub (https://raw.githubusercontent.com/UnderleveledBuilder/awesome-social-media-skills/main/catalog.json), which is a public community repository containing third-party registry/package entries.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill fetches catalog data from an arbitrary GitHub user repository without recognized official publisher provenance, presenting a medium-tier third-party dependency.