websocket-engineer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill is a WebSocket server blueprint where runtime ingests outsider-authored free text directly from clients via Socket.IO/WebSocket event handlers (e.g., socket.on("message", ...) / socket.on('message', ...) receiving user-provided text and emitting it), without any required step that selects a specific trusted item first.