web-frameworks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill includes a concrete example (getPost) that fetches and renders content from an external API (e.g., https://api.example.com/posts/${slug}), so it clearly ingests public/untrusted third‑party content (post.content) as part of its runtime workflow.