gitbook

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill makes API calls that retrieve and read GitBook space/page content (e.g., get_space_content, get_page) and explicitly supports importing from arbitrary public Git repositories (import_from_git with GitHub URLs), so it ingests untrusted public third‑party content that could carry indirect prompt injection.