btca-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill shows adding and querying public resources (e.g., "btca add -n svelte-dev https://github.com/sveltejs/svelte.dev" and then "btca ask -r svelte-dev ..."), so the agent is expected to fetch and read untrusted third‑party content from public sites like GitHub.