stitch-astro-wp-delivery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Astro code explicitly fetches and renders content from a headless WordPress REST API (https://wp.clientdomain.com/wp-json/wp/v2), which is an open/public source of user-generated content that the agent is expected to read/interpret and could carry indirect prompt injection.