find-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md explicitly instructs the agent to run the Context7 CLI via "npx ctx7@latest library" and "npx ctx7@latest docs" to fetch public library documentation and code examples (third‑party web content) that the agent is expected to read and use to form responses, so untrusted external content can influence actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill requires running "npx ctx7@latest" at runtime (fetching the ctx7 package from the npm registry, e.g. https://registry.npmjs.org/ctx7), which downloads and executes remote code and uses the fetched documentation/code to directly drive agent responses, so it is a required runtime external dependency that can control prompts.