custom-plugin-flutter-skill-database

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md shows runtime ingestion of remote, potentially user-generated data—e.g., SyncEngine calling remote.getUpdates() and FirestoreRepository reading collection snapshots/doc.data()—so third-party content from cloud databases (Firestore/remote API) is fetched and used to drive merge/sync logic.