effect-platform-abstraction

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly documents and uses the HttpClient service to perform GET/POST requests to external URLs (e.g., client.get('https://api.example.com/users') and parsing response.json), meaning the agent is expected to fetch and interpret untrusted third-party HTTP content as part of its workflow.