aws-healthomics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). SKILL.md explicitly says the skill creates/migrates workflows "from Git repos" and uses public containers (ECR pull-through), meaning the agent will fetch and interpret untrusted, user-generated content from public Git repositories and container registries as part of workflow setup and execution, which can contain instructions that materially influence actions.