skill-lookup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill instructs the agent to call the prompts.chat MCP server via search_skills/get_skill to retrieve SKILL.md and all file contents for arbitrary skills (returned by get_skill), which are untrusted user-authored files the agent is expected to read and then act on (install or execute), allowing third-party instructions to influence agent behavior.