observable-notebook-kit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly downloads and builds public Observable notebooks (e.g., the "notebooks download https://observablehq.com/..." command), meaning it fetches and parses user-generated content from observablehq.com which the agent is expected to read/interpret as part of its workflow.