nuxt-module-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's "mcp_nuxt_list-modules" and especially "mcp_nuxt_get-module" steps return module READMEs, compatibility, and stats from public package repositories (e.g., npm/GitHub), which are untrusted, user-generated third-party content that the agent is expected to read and interpret.