gate-info-defianalysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's bundled update flow (scripts/update-skill.sh and scripts/update-skill.ps1 and README) explicitly fetches SKILL.md and archives from the public GitHub/raw.githubusercontent.com URLs (https://raw.githubusercontent.com/gate/gate-skills/... and github.com/gate/gate-skills) and may apply those remote updates, so publicly-hosted third-party content can be read and directly alter the skill's behavior.