iii-http-invoked-functions

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly registers and invokes external HTTP endpoints (e.g., "Registers external HTTP endpoints as iii functions" and mentions "third-party webhooks" in SKILL.md), meaning the agent will call and consume responses from arbitrary third-party HTTP sources that could contain untrusted instructions.