speckle-impl-sharp-sdk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's core workflow (SKILL.md: Operations / Helpers and ServerTransport) explicitly fetches and deserializes data from Speckle servers (e.g., https://app.speckle.systems via ServerTransport and Helpers.Receive), which are public/user-generated and are read/interpreted by the agent as part of normal operations, so that third-party content could influence subsequent actions.