a0-review-plugin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Phase 4 explicitly instructs the reviewer to fetch and use the community index at https://github.com/agent0ai/a0-plugins/releases/download/generated-index/index.json — a public, community-maintained JSON file whose entries the agent must read and use to decide duplicates and readiness, so untrusted third‑party content can materially influence its decisions.