v0

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly retrieves chat content and generated source files from the v0 API (e.g., GET https://api.v0.dev/v1/chats/ returning latestVersion.files and demoUrl), which are third-party/user-generated outputs the agent is expected to read and act on, so untrusted content could inject instructions into subsequent actions.