react-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill's required workflow and reference files show fetching and ingesting open-web data (e.g., references/hooks-patterns.md's useApi fetch(url) and references/server-components.md's fetch('https://api.example.com/products')) and the SKILL.md explicitly lists "Data fetching patterns with TanStack Query or use()", so it will read and act on untrusted third‑party responses at runtime.