physics-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill clearly ingests open/public, user-contributed astrophysical literature and catalog data (e.g., Simbad.query_object, Vizier.query_region, SDSS via astroquery in astrophysics-data-guide/SKILL.md and the NASA ADS API usage in nasa-ads-api/SKILL.md), so the agent would read and act on untrusted third-party content returned by those services.