find-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow uses the Skills CLI to search/browse the open agent skills ecosystem (e.g., npx skills find / npx skills add from GitHub/skills.sh), which can fetch and ingest outsider-authored free text from public web/package sources into the agent’s context.