hexdocs-fetcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to use WebFetch to fetch and extract documentation from public hexdocs.pm pages (e.g., https://hexdocs.pm/oban and module HTML pages), meaning untrusted third‑party documentation is ingested and can materially influence the agent's actions.