formspree

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly describes fetching Formspree data (e.g., "List Form Submissions" and using membrane request/membrane action run to retrieve submissions) which are user-generated/untrusted form submissions from a third-party service that the agent would read and could contain instructions influencing subsequent actions.