Bun WebSockets

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md demonstrates WebSocket server handlers (e.g., the websocket.message examples and the Pub/Sub code that uses server.publish/subscribe) that ingest arbitrary client messages from external users and act on or rebroadcast them, exposing the agent to untrusted user-generated content.