agent-ready-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md Step 2–4 takes a user-provided url in POST https://agent-ready.dev/api/v1/scans and then ingests the resulting scan data (scraped titles/headings/llms.txt/AGENTS.md bodies and check messages) returned by GET /api/v1/scans/{id}, meaning outsider-authored content from an arbitrary submitted public page can reach the agent at runtime.