drupal-migration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's "JSON/API Migrations" section explicitly shows a source using plugin: url with data_fetcher_plugin: http and an urls list (e.g., 'https://api.example.com/users'), meaning it fetches and parses arbitrary external JSON endpoints as migration sources whose untrusted content is read and used to drive migration decisions.