apollo-client-patterns

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's components (e.g., PostsList, RealtimePosts, SearchPosts) query and subscribe to a GraphQL endpoint (uri from REACT_APP_GRAPHQL_URI or http://localhost:4000/graphql) and render posts/comments from that API, which can be arbitrary/untrusted user-generated content and thus could carry indirect prompt-injection.