wpm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill directly instructs fetching remote content (the installer script via curl from https://wpm.so/install) and relies on installing/publishing packages from the wpm registry (user-published plugins/themes), which are untrusted third-party content the agent would consume during normal workflows.