bknd-file-upload

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill accepts and fetches arbitrary external content (e.g., api.media.upload("https://example.com/image.png"), server-side fetch("https://example.com/default-avatar.png") in the seed example) and also ingests user-uploaded files via file inputs/XHR, meaning it clearly consumes untrusted third-party or user-generated content.