git-submodule

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill instructs the agent to add, clone, and update submodules from arbitrary public Git repositories (e.g., "git submodule add https://github.com/..." and "git submodule update --init --recursive"), which causes the agent to fetch and consume untrusted, user-generated content from third‑party sites like GitHub.