cmake

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow (SKILL.md and references/templates.md) explicitly uses FetchContent to download public Git repos (e.g., https://github.com/google/googletest.git and zlib) so untrusted third‑party code/metadata is fetched and processed as part of the build/configure workflow, which can materially influence tool behavior.