api-recon-and-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill explicitly instructs fetching and parsing untrusted public content (e.g., "curl https://target/app.js" and enumerating /swagger.json, /openapi.json, /docs, /graphql, etc.), so the agent will read and act on third-party API docs and site content that can influence its subsequent actions.