doppler-hooks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly directs the agent to "Use Doppler deployments as the contract source of truth," which instructs it to fetch and interpret open/public GitHub repository data (deployed addresses/revisions) that can materially change which contracts/addresses the agent interacts with.