dineway-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and EDITING-FLOW.md document remote commands (e.g., "npx dineway content get/list", "npx dineway types --url https://my-site.example.com" and login to arbitrary sites) that fetch and convert content from arbitrary remote sites (user-generated/untrusted), and the agent is expected to read and act on that content (edits/auto-publishes), so third-party content can influence tool actions.