find-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's SKILL.md explicitly directs the agent to run npx skills find [query], browse skills at https://skills.sh/ and install packages from GitHub or other public sources, meaning the agent will ingest and act on untrusted, user-provided third-party skill content that can change its tools and behavior.