unity-vrc-skills-renovator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md renovation procedure and Phase 2 (Information Gathering) together with references/changelog-sources.md explicitly instruct the agent to perform WebSearches and ingest content from open public sources (creators.vrchat.com, feedback.vrchat.com, GitHub, Qiita, Twitter/X, etc.), and that fetched third‑party content is used to decide updates to knowledge, rules, and enforcement, creating a clear vector for indirect prompt injection.