you-dont-need-isr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill's Phase 3 explicitly requires live WebFetch of public third-party pages (e.g., https://www.ubicloud.com/use-cases/github-actions and Vercel docs/pricing URLs) and parses that external content to compute build-cost projections that influence recommendations, so it clearly ingests untrusted public web content as part of its workflow.