repomix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's "Remote Repository Support" explicitly lets it process remote repositories (e.g., npx repomix --remote https://github.com/owner/repo), meaning it fetches public GitHub/URL-hosted, user-generated code and packages it for AI consumption, exposing the agent to untrusted third-party content.