3d-four-seasons

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required Verify step (SKILL.md line 72) directs the agent to read REFERENCES.md, which links to a third-party GitHub repository (MengTo/seijaku) at a pinned commit, so the agent must actively fetch outsider-authored source code, which is low exposure rather than a feed the attacker can push into.