sk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill fetches and installs skills from public GitHub repositories (e.g., the canonical https://github.com/lambdamechanic/skills used by sk install/upgrade and sk sync-back), so it ingests untrusted, user-generated content that the agent will read/interpret as part of its workflow.