dotnet-sdk-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s runtime workflow takes first-user request content and uses it to generate SDK code (e.g., it “analyze[s] input” as existing C# classes or OpenAPI/Swagger docs), but it does not describe reading outsider-authored free text from any external feed/queue/system without the user first providing specific documentation/classes to wrap.