intomd

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). SKILL.md explicitly directs the tool to fetch and convert arbitrary public documentation URLs via https://into.md/$1 (example: https://zod.dev), meaning the agent will ingest untrusted, user-generated or public web content that could contain instructions influencing its behavior.