transformers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs loading models from the public Hugging Face Hub (e.g., pipeline("text-generation", model="gpt2") and AutoTokenizer.from_pretrained("model-id") and login() to the hub), which fetches user-contributed/untrusted third‑party model artifacts whose outputs can directly influence generation and downstream actions.