mkdocs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill documentation includes examples that embed or load arbitrary public URLs (e.g., the Swagger UI remote spec , kroki ServerURL: https://kroki.io, PlantUML raw include URL, and external JS from unpkg) which cause the site/build/runtime to fetch and render untrusted third‑party content that the agent/user would read or interpret.