react-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly instructs the agent to query external documentation and a public GitHub repo (e.g., "Query Context7 /websites/react_dev", "/remix-run/react-router", and vercel-labs/agent-skills on GitHub), meaning the agent would fetch and read third-party, potentially user-authored content as part of its workflow.