nexus-elements-unified-balance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly instructs downloading and installing component JSON from the public URL https://elements.nexus.availproject.org/r/unified-balance.json (and uses a registry mapping to https://elements.nexus.availproject.org/r/{name}.json), which requires the agent to fetch and interpret external, publicly hosted content during installation.