openapi-lookup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: loadDocs() fetches DOCS_URL (user-supplied --url / API_DOCS_URL / config.json) and parses the returned OpenAPI JSON (res.json()), then renderEndpoint()/expand() stringify and include its $ref-expanded schemas into the agent’s LLM context—this is outsider-authored free text from an arbitrary external URL or file.