generating-typescript-types-from-apis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses live, external API responses and OpenAPI specs from URLs (see "Live endpoint" in Step 1, the openapi-typescript "From URL" example, and the fetch in scripts/generate-types.ts calling https://api.example.com/users/1), so it ingests untrusted third‑party content for runtime type inference.