aliyun-sas-manage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow and provided script explicitly fetch and parse OpenAPI metadata from a public third-party URL (e.g. https://api.aliyun.com/meta/v1/products/Sas/versions/2021-01-14/api-docs.json), which the agent is required to read and which can materially influence which APIs and parameters it chooses to call.