find-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's SKILL.md directs the agent to run "npx skills find" and to browse/install skills from the public skills marketplace (https://skills.sh/) and GitHub repos—open, user-contributed sources the agent would read/interpret and could materially change behavior by installing or following third‑party skill instructions.