ln-403-task-rework

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs that if local shared/ files are missing it must fetch them via WebFetch from the public URL https://raw.githubusercontent.com/levnikolaevich/claude-code-skills/master/skills/{path} and also marks many of those reference files as MANDATORY READ, meaning the agent will ingest and act on public GitHub content that is untrusted and can materially influence its decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly falls back at runtime to fetching required reference files from https://raw.githubusercontent.com/levnikolaevich/claude-code-skills/master/skills/{path}, and those fetched markdowns are marked MANDATORY READs that directly shape the agent's instructions/behavior, so this is a required runtime external source that can control prompts.