atomemo-plugin-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's reference files (references/declarative-parameters-examples.md — "Complete Tool Example — Firecrawl Scrape") show a Tool that accepts arbitrary URLs and posts them to an external scraping API (https://api.firecrawl.dev/v1/scrape), meaning the agent is explicitly set up to fetch and ingest untrusted public web content that could influence subsequent tool behavior.