trpc-fullstack

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime path is the server-side tRPC HTTP handler using fetchRequestHandler with a createContext function that receives the fetch Request (createTRPCContext(opts)), meaning outsider-authored request body/parameters and headers are ingested by the procedures (after Zod validation) for every call.