cafe-24

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to fetch and run actions against Cafe24 via Membrane (e.g., membrane action run ... and membrane request CONNECTION_ID /path/to/endpoint), which pulls data from third-party Cafe24 stores/APIs (potentially user-generated/untrusted content) that the agent is expected to read and may use to drive subsequent actions.