skill-search-optimizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly instructs installing and reading competing skills from the public ClawdHub/ClawdHub registry (e.g., "npx molthub@latest install competitor-skill" and "head -10 skills/competitor-skill/SKILL.md"), which are user-published, untrusted third-party skill descriptions the agent would ingest and could influence later actions.