websockets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly ingests and processes arbitrary user-generated messages from connected clients via WebSocket handlers (e.g., socket.on('chat:message', ...) and ws.on('message', ...)), which are untrusted third-party inputs that could carry indirect prompt-injection payloads.