devtu-optimize-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly requires querying and ingesting open/public third‑party sources as part of its required workflow (e.g., "Phase 0: Foundation Data (aggregator query)" and literature citation expansion using PubMed_get_cited_by / EuropePMC_get_citations / OpenAlex, and aggregators like Open Targets and PubChem), so the agent will read and act on untrusted third‑party content that can influence decisions.