datocms-cda

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly issues read queries to the DatoCMS Content Delivery API (e.g., using executeQuery/rawExecuteQuery against https://graphql.datocms.com/ as described in SKILL.md Step 4 and references/client-and-config.md), which ingests arbitrary project content (user-generated/public CMS content) that the agent is expected to read and use to drive rendering, pagination, cache-tagging, and follow-up actions—therefore it exposes the agent to untrusted third-party content that could influence behavior.