find-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to query and browse open third-party skill listings (e.g., "npx skills find [query]" and "Browse skills at: https://skills.sh/") and to install packages from external repositories (e.g., "npx skills add owner/repo@skill"), which means the agent will fetch and consume untrusted, user-published content that can influence its actions.