rails

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's troubleshooting section explicitly tells the agent to "review the Rails guides at guides.rubyonrails.org", "check the API documentation at api.rubyonrails.org", and "search GitHub issues", which directs the agent to fetch and read public web content—including user-generated GitHub issues—that could contain untrusted instructions affecting decisions or next actions.