openapi-to-typescript

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required workflow, the agent reads an OpenAPI file specified by the user (step 1–2) and ingests its contents (e.g., components/schemas, paths, plus schema descriptions for JSDoc) to generate TypeScript, so outsider-provided spec text can directly enter the LLM runtime via the file path the workflow loads.