testing-api-tester

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow and required instructions explicitly direct the agent to "catalog" and "validate third-party API integrations" (Step 1: API Discovery and Analysis / "Validate third-party API integrations") and the included test code fetches arbitrary ${baseURL} endpoints, showing the agent will fetch and interpret external API responses (untrusted third‑party content) as part of its decision-making.