toon

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill's documentation explicitly shows ingesting public web JSON via commands like "curl -s https://api.github.com/users/torvalds | npx @toon-format/cli" and similar curl/jq pipelines, so it reads/encodes arbitrary public (untrusted/user-generated) third‑party content that could carry indirect prompt injections.