block-collection-and-party

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill fetches and parses public, community-contributed resources (e.g., the Block Party index at https://www.aem.live/developer/block-party/block-party.json and user GitHub repos via the GitHub API in search-block-collection-github.js, and it retrieves block HTML from the live Block Collection site in get-block-structure.js), so it ingests untrusted, third‑party/user-generated content and interprets it as part of its workflow.