heyapi-openapi-ts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow explicitly accepts an OpenAPI spec via "local file, URL, or hosted registry reference" (SKILL.md Default workflow step 1), meaning the agent may fetch and parse untrusted public OpenAPI documents which could embed instructions that materially influence generation and subsequent actions.