skill-creator-ms

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly requires the user to provide a documentation URL or repository and instructs the agent to search/verify Microsoft Learn docs and GitHub repos (Step 1: "Gather SDK Context" and "Search microsoft-docs MCP"), which means the agent will fetch and interpret external public documentation/repositories that can directly influence skill creation and subsequent actions.