create-cli-tool

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md "Start Here" step explicitly tells the agent to "Consider upstream guidance at https://clig.dev/," which is a public third‑party website the agent may be expected to read and use to resolve design tradeoffs, so external, untrusted web content can directly influence decisions.