datocms-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's importing-content references (references/importing-content.md) explicitly run WordPress and Contentful import commands that fetch and ingest schema and user-generated content from arbitrary external sites (e.g., --wp-url, Contentful spaces), which the agent is expected to read and act on (creating/updating schema and data), so untrusted third-party content can materially influence subsequent CLI actions.