web3forms-contact-forms-for-static-websites

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly instructs using Membrane to query the Web3Forms service (e.g., "Forms -> Submissions" and the "membrane request CONNECTION_ID /path/to/endpoint" and action-run examples), which causes the agent to fetch and process user-generated/untrusted form submissions from a third-party API that could contain instructions influencing subsequent actions.