datocms-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly supports importing content from arbitrary external sites (e.g., WordPress and Contentful imports such as npx datocms wordpress:import --wp-url=... and npx datocms contentful:import ...) as documented in references/importing-content.md, which causes the agent to fetch and ingest untrusted, user-generated third‑party content that can drive schema changes and migration actions.