find-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill instructs the agent to discover and present skills from public, user-maintained sources (via npx skills find [query], links on https://skills.sh/ and GitHub owner/repo@skill packages), which are untrusted third‑party content the agent will read and could contain indirect prompt-injection.