api-contract

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly shows an oasdiff command that fetches a public raw GitHub URL (https://raw.githubusercontent.com/org/repo/main/api/v1/openapi.yaml), meaning the workflow ingests open/public third-party spec content which can influence CI decisions (e.g., fail a PR) and thus could enable indirect prompt-injection via the fetched spec.