tanstack-devtools-vite-plugin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow exposes a middleware endpoint that ingests POSTed JSON console entries from the browser via /__tsd/console-pipe and /__tsd/console-pipe/server, meaning outsider-authored free text (console messages) can be sent into the devtools server for processing.