open-observe-api-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's search_logs function explicitly fetches and ingests log/search results from a configured OpenObserve endpoint (e.g., {url}/api/{org}/{stream}/_search, examples use https://api.openobserve.ai and reference https://openobserve.ai/docs/api/), which can contain untrusted/user-generated log content that the agent will read and interpret.