postman

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill runs Python scripts that call the Postman API (api.getpostman.com) — e.g., list_collections.py, manage_specs.py and workflows like view_documentation.md — to fetch and parse user-created collections, specs, and documentation from Postman workspaces, which are untrusted, user-generated third-party content that the agent reads and interprets at runtime.