react-hook-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The useFetch hook (hooks/useFetch.ts, in "Data Fetching Hooks") calls fetch(url) and parses response.json(), so it can ingest arbitrary external or user-provided web content (open/public third‑party data) that could carry untrusted instructions.