skills-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's workflow instructs using the ccpm CLI to search, fetch details, and install skills from the public CCPM registry (via ccpm search, ccpm info, ccpm install), which exposes the agent to untrusted, user-published metadata and third-party code that can change agent behavior.