vercel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and interprets deployment URLs (e.g., workflows.md shows "vercel curl /api/health --deployment " and mcp-reference.md exposes mcp_com_vercel_ve_web_fetch_vercel_url) so the agent will read untrusted public/user-generated web content and use those responses to drive promote/rollback and other actions.