just-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly includes runtime fetch examples that request arbitrary URLs (e.g., the [script("node")] example using fetch('https://api.example.com/data')) and instructs using Context7 MCP with library ID /websites/just_systems-man to retrieve up-to-date Just documentation, meaning the agent is expected to ingest open, third-party web content.