service-migration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow (step 4) instructs the agent to fetch and "Refresh docs context" from external URLs (https://react-native-nitro-geolocation.pages.dev/llms.txt and llms-full.txt) and to use that fetched content as an index/API reference for transformations, meaning untrusted third‑party content is read and can materially influence the agent's actions.