bun-http-server

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill clearly ingests untrusted, user-generated HTTP request content (see "Body Parsing" where it calls req.json(), req.text(), req.formData(), and "Request Handling" where it reads url.pathname and query params), which external clients could use to provide instructions that influence runtime behavior.