forgejo-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Forgejo API’s runtime path refreshes a local mirror by fetching and ingesting the live Swagger snapshot from https://<forgejo-host>/swagger.v1.json, which is attacker-influenced if users can make the Forgejo instance emit poisoned spec text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill refreshes a local API mirror by fetching the live Swagger spec at runtime from https:///swagger.v1.json, and that fetched JSON is injected into the agent's API knowledge/context which directly controls its prompts and behavior.