wordpress-migration-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs mirroring and scraping arbitrary public WordPress sites with tools like HTTrack/wget (e.g., httrack "https://example.com") and parsing WXR/XML and rendered HTML, so the agent would ingest untrusted, user-generated third-party content as part of its workflow.