uv

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's example script scripts/pep723_demo.py performs requests.get("https://httpbin.org/get") and parses/pretty-prints the JSON response, so running scripts with uv can fetch and display untrusted public web content from an external URL.