url-state-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill includes curl commands that fetch markdown from public third-party endpoints (https://fullstackrecipes.com/api/recipes/...), so it directs the agent/user to ingest external, untrusted web content as part of the workflow.