get-url

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly provides a "get-url" tool that fetches "any URL" as markdown ("Fetch any URL as markdown with npx playbooks get"), so the agent will ingest arbitrary public web content (untrusted/user-generated) for analysis and quoting, enabling indirect prompt injection.