pma

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's required workflow explicitly tells the agent to verify dependency versions and consult public registries and vendor docs (references/workflow.md — "crates.io / npmjs.com / pkg.go.dev" and "vendor site" / Context7) and to pull templates from a public GitHub URL (references/delivery.md — https://github.com/github/gitignore), which requires fetching and interpreting open/public third‑party content that can materially affect decisions like dependency selection and implementation.