stream-react

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Track F (audit) and Track M (migrate) require WebFetch of live Stream docs pages from references/docs-map.md at runtime, which is public web content (outsider-authored) ingested as readable Markdown into the agent’s LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to WebFetch live GetStream docs/release guides at runtime (e.g. https://getstream.io/chat/docs/sdk/react/release-guides/upgrade-to-v14.md), so external .md pages from getstream.io are fetched and then used as authoritative instructions for code edits—this is a runtime external dependency that directly controls the agent's actions.