websocket-implementation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill accepts and processes arbitrary user-generated messages over WebSockets (e.g., the Node.js socket.on('chat:message', ...) handler and the Python websocket_handler that json.loads incoming msg.data for 'message' events), so it ingests untrusted third-party content as part of its runtime workflow.