context7

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Skill context7 runs ctx7 library and ctx7 docs based on the user’s free-form query (used directly for result ranking and as the query), so outsider-authored text from the user can influence which documentation/code snippets the workflow retrieves and ingests.