infra-platform-netlify

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested at runtime via HTTP requests to Netlify serverless/edge/background functions (e.g., await req.json(), await req.formData(), and await response.text() in the provided runtime patterns), meaning attackers can POST/submit content that the skill’s functions then read and process.