update-llms

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly requires the agent to "Review the official specification at https://llmstxt.org/", a public third‑party website whose content the agent must read and use to determine how to update llms.txt, so external page content could influence tool use and edits.