docyrus-platform

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill documentation explicitly documents tools that fetch and ingest arbitrary public URLs (e.g., references/docyrus-cli-usage.md: "docyrus browser content " to extract readable content, docyrus connect curl <slug> <endpoint> allowing absolute endpoints, and automation http-request nodes), so the agent can read untrusted third‑party web content that could contain instructions influencing subsequent actions.