datocms-frontend-integrations

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill explicitly fetches and consumes untrusted, user-generated content from DatoCMS (e.g., via executeQuery / rawExecuteQuery calls in src/lib/datocms/executeQuery.ts and the Web Previews preview-links endpoint that reads request.json() from DatoCMS), and that content (including stega-encoded edit URLs and record metadata) is interpreted at runtime to drive behavior like preview link generation, Content Link overlays, subscriptions/reloads, and cache invalidation — so third-party content can materially influence agent actions.