crowddev

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md shows it queries Crowd.dev community data (e.g., actions like query-activities, list-active-members, query-members) and allows arbitrary proxy requests via "membrane request CONNECTION_ID /path/to/endpoint", which fetches untrusted, user-generated content from a public third-party platform that the agent is expected to read and could influence subsequent actions.