http-endpoints

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly describes registering HTTP triggers and handlers that receive ApiRequest bodies (e.g., "req.body — parsed request body") for inbound routes owned by iii, which means untrusted external HTTP request content can be ingested and interpreted to influence behavior.