repomix-explorer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill runs repomix against remote repositories (e.g., via npx repomix@latest --remote <repo> and examples like --remote facebook/react or Explore https://github.com/microsoft/vscode) and then reads/analyzes the generated output, which clearly ingests untrusted, user-generated content from public third‑party sites.