gmod-addon-maker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md "Specific API Lookup Rule" explicitly instructs the agent to search, fetch, and read pages from the public Garry's Mod wiki (https://wiki.facepunch.com/gmod), a third-party user-editable site whose content the agent must interpret and follow to determine API usage, enabling indirect prompt injection risk.