nextjs-app-router

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill's examples show runtime ingestion of external, potentially untrusted content — e.g., Data Fetching Patterns uses fetch('https://api.example.com/data') and app/api/webhook/route.ts reads request.json() for webhooks — so the agent would consume third-party payloads as part of its workflow.