tiptap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly requires cloning and reading public GitHub repositories (https://github.com/ueberdosis/tiptap and https://github.com/ueberdosis/tiptap-docs), i.e., untrusted third-party content that the agent must read and use to guide implementation, so those pages could indirectly inject instructions affecting behavior.