tesla

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's install and quick-start instructions explicitly tell the agent to read/install SKILL.md from a public GitHub raw URL (e.g., https://raw.githubusercontent.com/theneoai/.../SKILL.md), which is an untrusted, user-hosted third‑party source whose contents would be fetched and could change the agent's behavior.