asodev-public-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow fetches and parses live OpenAPI JSON from external URLs (https://developer.aso.dev/openapi/... / https://partners.aso.dev/openapi/...), which is outsider-authored free text/structured prose ingested into the agent context for endpoint selection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs the agent to fetch live OpenAPI documents at https://developer.aso.dev/openapi/developer-v1.json and https://partners.aso.dev/openapi/partners-v1.json at runtime, and those fetched schemas directly determine the agent's endpoint definitions and responses (i.e., they control prompts/behavior).