gleam

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's reference.md Research section explicitly instructs the agent to query external Context7 docs and to use the GitHub CLI to search and read public repositories/files (e.g., gh api, gh search), which are untrusted, user-generated third-party sources that the agent is expected to read and act on as part of its workflow.