uptime-monitoring

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill makes HTTP requests to external endpoints (e.g., heartbeat.js uses axios.get(endpoint.url) and the health/deep route calls fetch('https://api.example.com/health')), meaning it ingests responses from arbitrary third-party URLs as part of its monitoring workflow and thus can be exposed to untrusted content.