seaweedfs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to fetch and ingest content from the public upstream repository and wiki (see plan.md "Source constraints: use upstream repository and wiki only" and the references files listing https://github.com/seaweedfs/seaweedfs/wiki/...), meaning untrusted third‑party pages are read and used to drive operational decisions and tool actions.